Critical severity9.8NVD Advisory· Published Aug 22, 2022· Updated Jun 17, 2026
CVE-2021-3586
CVE-2021-3586
Description
A flaw was found in servicemesh-operator. The NetworkPolicy resources installed for Maistra do not properly specify which ports may be accessed, allowing access to all ports on these resources from any pod. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- cpe:2.3:a:redhat:openshift_service_mesh:2.0:*:*:*:*:*:*:*
- cpe:2.3:a:redhat:servicemesh-operator:2.0.5.1:*:*:*:*:*:*:*
- servicemesh-operator/servicemesh-operatordescription
Patches
Vulnerability mechanics
References
2- access.redhat.com/security/cve/CVE-2021-3586nvdVendor Advisory
- bugzilla.redhat.com/show_bug.cginvdIssue TrackingVendor Advisory
News mentions
0No linked articles in our index yet.