medium6.5
CVE-2022-27495
On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network.
Impact
On all versions 1.3.x (fixed in 1.4.0) NGINX Service Mesh control plane endpoints are exposed to the cluster overlay network. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| F5 | Nginx Service Mesh | Versions 1.3.0, 1.3.1 |