There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - In Istio 1.5.0 though 1.5.8 and Istio 1.6.0 through 1.6.7, when users specify an AuthorizationPolicy
    resource with DENY actions using wildcard suffixes (e.g. *-some-suffix) for source principals or namespace
    fields, callers will never be denied access, bypassing the intended policy. (CVE-2020-16844)

远程 Redhat Enterprise Linux 8 主机上安装的程序包受到 RHSA-2020: 3425 公告中提及的漏洞的影响。

  - istio：TCP 服务的 DENY 策略未正确转换 (CVE-2020-16844)

请注意，Nessus 尚未测试此问题，而是只依赖于应用程序自我报告的版本号。

遠端 Redhat Enterprise Linux 8 主機上安裝的套件受到 RHSA-2020: 3425 公告中提及的弱點影響。

  - istio：TCP 服務的 DENY 原則未正確轉譯 (CVE-2020-16844)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

リモートRedhat Enterprise Linux 8ホストにインストールされているパッケージは、RHSA-2020: 3425のアドバイザリ。

  - istio: TCPサービスのDENYポリシーの誤訳（CVE-2020-16844）

Nessusはこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:3425 advisory.

    Red Hat OpenShift Service Mesh is Red Hat's distribution of the Istio service mesh project, tailored for     installation into an on-premise OpenShift Container Platform installation.

    Security Fix(es):

    * istio: incorrect translation of DENY policy for TCP service (CVE-2020-16844)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
412370	SCA: security update for istio.io/istio (GHSA-82mm-ffjr-h86c)	Tenable Cloud Security	SCA Checks	2025/1/23	2026/7/2	medium
412370	SCA: security update for istio.io/istio (GHSA-82mm-ffjr-h86c)	Tenable Self-Hosted Container Security	SCA Checks	2025/1/23	2026/7/2	medium
139508	RHEL 8：Red Hat OpenShift Service Mesh 1.1 (RHSA-2020: 3425)	Nessus	Red Hat Local Security Checks	2020/8/11	2024/11/7	medium
139508	RHEL 8：Red Hat OpenShift Service Mesh 1.1 (RHSA-2020: 3425)	Nessus	Red Hat Local Security Checks	2020/8/11	2024/11/7	medium
139508	RHEL 8: Red Hat OpenShift Service Mesh 1.1（RHSA-2020: 3425）	Nessus	Red Hat Local Security Checks	2020/8/11	2024/11/7	medium
139508	RHEL 8 : Red Hat OpenShift Service Mesh 1.1 (RHSA-2020:3425)	Nessus	Red Hat Local Security Checks	2020/8/11	2024/11/7	medium

偵測

搜尋 Plugin

medium

medium

medium

medium

medium

medium