CVE-2019-12243
First published: Wed Jun 05 2019(Updated: )
Istio 1.1.x through 1.1.6 has Incorrect Access Control.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| go/istio.io/istio | >=1.1.0<1.1.7 | 1.1.7 |
| Istio Istio | >=1.1<=1.1.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://nvd.nist.gov/vuln/detail/CVE-2019-12243
- https://istio.io/blog/2019/cve-2019-12243/
- https://github.com/istio/istio/issues/13868
- https://github.com/istio/istio/pull/13893/commits/91faba277439dab798185730d1624bd53e37bb06
- https://github.com/advisories/GHSA-6g5f-f5pm-mjrg (Advisory)
- https://istio.io/about/notes/
Frequently Asked Questions
What is the vulnerability ID for the Istio Incorrect Access Control vulnerability?
The vulnerability ID for the Istio Incorrect Access Control vulnerability is CVE-2019-12243.
What is the severity rating of CVE-2019-12243?
The severity rating of CVE-2019-12243 is high with a score of 8.9.
How does the Istio Incorrect Access Control vulnerability affect the software?
The Istio Incorrect Access Control vulnerability affects Istio versions 1.1.x through 1.1.6 and Microsoft Windows Server 2022.
How can I fix the Istio Incorrect Access Control vulnerability?
To fix the Istio Incorrect Access Control vulnerability, upgrade to Istio version 1.1.7 or higher.
Where can I find more information about CVE-2019-12243?
You can find more information about CVE-2019-12243 on the NIST National Vulnerability Database, Istio blog, and GitHub.
- collector/github-advisory-latest
- alias/GHSA-6g5f-f5pm-mjrg
- alias/CVE-2019-12243
- collector/github-advisory
- agent/author
- agent/type
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-cve
- agent/weakness
- agent/references
- agent/severity
- agent/softwarecombine
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/tags
- agent/event
- agent/first-publish-date
- agent/trending
- package-manager/go
- vendor/istio
- canonical/istio istio
- version/istio istio/1.1
- version/istio istio/1.1.6