CVE-2021-39156

mediumPriorität · verfolgen · 40OT-Risiko · erhöhtEPSS 0.012 · 67. PerzentilExploit · PoCEUUS

grimoire priorityP1 · Urgent

Exploitable?

Public exploit

1 exploit · PoC

Likely / severe?

1.18% (67th) EPSS

CVSS 5 · medium

Is it mine?

64 products

Prüfe deine Angriffsfläche

Who says so?

5 sources

cnnvd · enisa_euvd · nvd · osv

EPSS · bewertet 2026-10-27

Istio is an open source platform for providing a uniform way to integrate microservices, manage traffic flow across microservices, enforce policies and aggregate telemetry data. Istio 1.11.0, 1.10.3 and below, and 1.9.7 and below contain a remotely exploitable vulnerability where an HTTP request with `#fragment` in the path may bypass Istio’s URI path based authorization policies. Patches are available in Istio 1.11.1, Istio 1.10.4 and Istio 1.9.8. As a work around a Lua filter may be written to normalize the path.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

Behobenservicemesh-0:2.0.7-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-0:2.0.7-3.el8.s390x as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-0:2.0.7-3.el8.src as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-0:2.0.7-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-istioctl-0:2.0.7-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-istioctl-0:2.0.7-3.el8.s390x as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-istioctl-0:2.0.7-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-mixc-0:2.0.7-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-mixc-0:2.0.7-3.el8.s390x as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-mixc-0:2.0.7-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-mixs-0:2.0.7-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-mixs-0:2.0.7-3.el8.s390x as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-mixs-0:2.0.7-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-pilot-agent-0:2.0.7-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-pilot-agent-0:2.0.7-3.el8.s390x as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-pilot-agent-0:2.0.7-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-pilot-discovery-0:2.0.7-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-pilot-discovery-0:2.0.7-3.el8.s390x as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-pilot-discovery-0:2.0.7-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/latest/service_mesh/v2x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3272
Behobenservicemesh-0:1.1.17-3.el8.ppc64le as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-0:1.1.17-3.el8.s390x as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-0:1.1.17-3.el8.src as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-0:1.1.17-3.el8.x86_64 as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-citadel-0:1.1.17-3.el8.ppc64le as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-citadel-0:1.1.17-3.el8.s390x as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-citadel-0:1.1.17-3.el8.x86_64 as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-galley-0:1.1.17-3.el8.ppc64le as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-galley-0:1.1.17-3.el8.s390x as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-galley-0:1.1.17-3.el8.x86_64 as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-istioctl-0:1.1.17-3.el8.ppc64le as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-istioctl-0:1.1.17-3.el8.s390x as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-istioctl-0:1.1.17-3.el8.x86_64 as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-mixc-0:1.1.17-3.el8.ppc64le as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-mixc-0:1.1.17-3.el8.s390x as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-mixc-0:1.1.17-3.el8.x86_64 as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-mixs-0:1.1.17-3.el8.ppc64le as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-mixs-0:1.1.17-3.el8.s390x as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-mixs-0:1.1.17-3.el8.x86_64 as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-pilot-agent-0:1.1.17-3.el8.ppc64le as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-pilot-agent-0:1.1.17-3.el8.s390x as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-pilot-agent-0:1.1.17-3.el8.x86_64 as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-pilot-discovery-0:1.1.17-3.el8.ppc64le as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-pilot-discovery-0:1.1.17-3.el8.s390x as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-pilot-discovery-0:1.1.17-3.el8.x86_64 as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-sidecar-injector-0:1.1.17-3.el8.ppc64le as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-sidecar-injector-0:1.1.17-3.el8.s390x as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273
Behobenservicemesh-sidecar-injector-0:1.1.17-3.el8.x86_64 as a component of OpenShift Service Mesh 1.1redhat_csaf
The OpenShift Service Mesh Release Notes provide information on the features and known issues: https://docs.openshift.com/container-platform/4.8/service_mesh/v1x/servicemesh-release-notes.html
https://access.redhat.com/errata/RHSA-2021:3273

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

8.3

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen⚠ Quellen uneinig · medium–high · 5–8.3

v2.05mediumAV:N/AC:L/Au:N/C:P/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 10 · Auswirkung 2.9

v3.17.5highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:Nprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 3.6

v3.18.1highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Nsecondary · ENISA EU

v3.18.1highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Nsecondary · security-advisories@github.comAusnutzbarkeit 2.8 · Auswirkung 5.2

v3.18.1highCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:Nsecondary · OSV

v3.17.1highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N/E:Psecondary · CVSS-BT (t0sche)

v3.18.3highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:Lsecondary · Red Hat Product Security US

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-706USprimärCWE-706USCWE-863USCWE-863USCWE-863US

Exploits (1)

Öffentlicher Proof-of-Concept- und Exploit-Code.

mostafaanouarghorab/MicroserviceCVE-2021-39156mostafaanouarghorab/MicroserviceCVE-2021-39156PoC · poc_in_github

betroffene Produkte (64)

Betroffene Produkte und Versionsbereiche.

istio istio≤ < 1.9.8enisa_euvdEU
istio istio1.10.0, → 1.10.4enisa_euvdEU
istio istio1.11.0, → 1.11.1enisa_euvdEU
istio istio< 1.9.8nvdUScpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*
istio istio1.10.0 → 1.10.3nvdUScpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*
istio istio1.11.0 → 1.11.1nvdUScpe:2.3:a:istio:istio:*:*:*:*:*:*:*:*
Go istio.io/istio< 1.9.8osvUSpkg:golang/istio.io/istio
Go istio.io/istio1.10.0 → 1.10.4osvUSpkg:golang/istio.io/istio
Go istio.io/istio1.11.0 → 1.11.1osvUSpkg:golang/istio.io/istio
servicemesh-0:1.1.17-3.el8.ppc64le as a component of OpenShift Service Mesh 1.1alle Versionenfixedredhat_csafUS
servicemesh-0:1.1.17-3.el8.s390x as a component of OpenShift Service Mesh 1.1alle Versionenfixedredhat_csafUS
servicemesh-0:1.1.17-3.el8.src as a component of OpenShift Service Mesh 1.1alle Versionenfixedredhat_csafUS
servicemesh-0:1.1.17-3.el8.x86_64 as a component of OpenShift Service Mesh 1.1alle Versionenfixedredhat_csafUS
servicemesh-0:2.0.7-3.el8.ppc64le as a component of OpenShift Service Mesh 2.0alle Versionenfixedredhat_csafUS
servicemesh-0:2.0.7-3.el8.s390x as a component of OpenShift Service Mesh 2.0alle Versionenfixedredhat_csafUS
servicemesh-0:2.0.7-3.el8.src as a component of OpenShift Service Mesh 2.0alle Versionenfixedredhat_csafUS
servicemesh-0:2.0.7-3.el8.x86_64 as a component of OpenShift Service Mesh 2.0alle Versionenfixedredhat_csafUS
servicemesh-citadel-0:1.1.17-3.el8.ppc64le as a component of OpenShift Service Mesh 1.1alle Versionenfixedredhat_csafUS
servicemesh-citadel-0:1.1.17-3.el8.s390x as a component of OpenShift Service Mesh 1.1alle Versionenfixedredhat_csafUS
servicemesh-citadel-0:1.1.17-3.el8.x86_64 as a component of OpenShift Service Mesh 1.1alle Versionenfixedredhat_csafUS

20 von 64 angezeigt

Advisories (3)

Hersteller- und Ökosystem-Meldungen dazu.

RHSA-2021:3272Red Hat Security Advisory: Red Hat OpenShift Service Mesh 2.0.7.1 security update2021-08-25csaf · redhat_csafUS
An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 2.0. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
RHSA-2021:3273Red Hat Security Advisory: Red Hat OpenShift Service Mesh 1.1.17.1 security update2021-08-25csaf · redhat_csafUS
An update for servicemesh and servicemesh-proxy is now available for OpenShift Service Mesh 1.1. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
GHSA-hqxw-mm44-gc4rIstio Fragments in Path May Lead to Authorization Policy Bypass2021-08-30ghsa · osvUS
### Impact Istio 1.11.0, 1.10.3 and below, and 1.9.7 and below contain a remotely exploitable vulnerability where an HTTP request with `#fragment` in the path may bypass Istio’s URI path based authorization policies. ### Patches * Istio 1.11.1 and above * Istio 1.10.4 and above * Istio 1.9.8 and above ### Workarounds A Lua filter may be written to normalize the path. This is similar to the Path normalization presented in the [Security Best Practices](https://istio.io/latest/docs/ops/best-practices/security/#case-normalization) guide. ### References More details can be found in the [Istio Security Bulletin](https://istio.io/latest/news/security/istio-security-2021-008) ### For more information If you have any questions or comments about this advisory, please email us at istio-security-vulnerability-reports@googlegroups.com

auch bekannt als (3)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd nvd osv redhat_csaf NVD CVE.org MITRE

veröffentlicht 2021-08-24geändert 2026-06-17

verwandt (190)

Verwandte Einträge.

ID	Schweregrad	EPSS	ausnutzbar	veröffentlicht
CVE-2025-24813US	critical9.8OT kritisch	99.9% (100th)	KEV	2025-03-10
Path Equivalence: 'file.Name' (Internal Dot) leading to Remote Code Execution and/or Information disclosure and/or malicious content added to uploaded files via write enabled Defau…
CVE-2021-40539US	critical9.8OT kritisch	99.0% (100th)	KEV	2021-09-07
Zoho ManageEngine ADSelfService Plus version 6113 and prior is vulnerable to REST API authentication bypass with resultant remote code execution.
CVE-2020-15505US	critical9.8OT kritisch	99.7% (100th)	KEV	2020-07-07
A remote code execution vulnerability in MobileIron Core & Connector versions 10.3.0.3 and earlier, 10.4.0.0, 10.4.0.1, 10.4.0.2, 10.4.0.3, 10.5.1.0, 10.5.2.0 and 10.6.0.0; and Sen…
CVE-2021-40856US	high7.5	50.1% (99th)	—	2021-12-13
Auerswald COMfortel 1400 IP and 2600 IP before 2.8G devices allow Authentication Bypass via the /about/../ substring.
CVE-2019-0571US	high7.8	15.8% (97th)	Exploit	2019-01-08
An elevation of privilege vulnerability exists when the Windows Data Sharing Service improperly handles file operations, aka "Windows Data Sharing Service Elevation of Privilege Vu…

+185 weitere

Referenzen (9)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan