Skip to content
6.5 Medium

CVE-2022-27495 On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay…

Description

On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated

Affected products and versions

Product Affected versions Fixed in
NGINX Service Mesh 1.4 earliest → < 1.4.0 1.4.0
NGINX Service Mesh 1.3.x No fix stated

References

Timeline

  1. Published
  2. Last modified
Track this CVE