Database/Container, Kubernetes & orchestration
Istio: Localhost access to the istiod pod lets a user impersonate any workload identity in the mesh
CVE-2022-39388Container, Kubernetes & orchestrationcurated
Impact
Localhost access to the istiod pod lets a user impersonate any workload identity in the mesh
Who can reach it
An attacker with a foothold in the istiod pod
What to do
Rolling istiod upgrade; restrict exec into istio-system
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.