Advisories · Technology
Red Hat OpenShift Service Mesh 2.
Every CVE that names Red Hat OpenShift Service Mesh 2 among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Envoyproxy: openshift service mesh 2.6.3 and 2.5.6 envoy header handling allows log injection and potential spoofing
- Red Hat OpenShift Service Mesh 2
- Other injection
- CVSS 7.1 High
Envoyproxy: openshift service mesh envoy http header sanitization bypass leading to dos and unauthorized access
- Red Hat OpenShift Service Mesh 2
- HTTP request smuggling