CVE-2021-3586 | BDVDB-2026-182773 Detail

servicemesh-operator

Description#

A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-1188 Insecure Default Initialization of Resource

References#

https://bugzilla.redhat.com/show_bug.cgi?id=1967738
https://access.redhat.com/security/cve/CVE-2021-3586

Exploit#

No public exploit known

History#

Version 12022-08-22Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.