CVE-2021-3586

Name of the Vulnerable Software and Affected Versions servicemesh-operator (affected versions not specified)

Description A flaw was found in the servicemesh-operator, where the NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed. This allows access to all ports on these resources from any pod, posing a threat to data confidentiality and integrity, as well as system availability.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.