漏洞信息
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Istio may allow identity impersonation if user has localhost access
Vulnerability Description
Istio is an open platform to connect, manage, and secure microservices. In versions on the 1.15.x branch prior to 1.15.3, a user can impersonate any workload identity within the service mesh if they have localhost access to the Istiod control plane. Version 1.15.3 contains a patch for this issue. There are no known workarounds.
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:N
Vulnerability Type
授权机制不正确
Vulnerability Title
Istio 安全漏洞
Vulnerability Description
Istio是一套连接、管理和保护微服务的开放平台。 Istio 1.15.x至1.15.3之前版本的分支存在安全漏洞，该漏洞源于拥有对Istiod控制平面的本地主机访问权限的用户可以在服务网格中模拟任何工作负载标识。
CVSS Information
N/A
Vulnerability Type
N/A