Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter (not HTTP filters).
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Envoy 安全漏洞
Vulnerability Description
Envoy是一款开源的分布式代理服务器。 Envoy before 1.16.1版本存在安全漏洞，该漏洞源于记录一个不正确的下游地址，因为它只考虑直接连接的对等端，而不是代理协议报头中的信息。这将影响将tcp-proxy作为网络过滤器(不是HTTP过滤器)的情况。
CVSS Information
N/A
Vulnerability Type
N/A