CVE-2020-8843

7.4 highEPSS 1.1%

High (7.4) in istio istio. EPSS 1.1% chance of exploitation in the next 30 days.

An issue was discovered in Istio 1.3 through 1.3.6. Under certain circumstances, it is possible to bypass a specifically configured Mixer policy. Istio-proxy accepts the x-istio-attributes header at ingress that can be used to affect policy decisions when Mixer policy selectively applies to a source equal to ingress. To exploit this vulnerability, someone has to encode a source.uid in this header. This feature is disabled by default in Istio 1.3 and 1.4.

Severity

CVSS 3.1

7.4 high

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 1.1% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-20
Published: 2020-02-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

istio:istio

References

https://github.com/istio/istio/commits/master
https://istio.io/news/security/
https://istio.io/news/security/istio-security-2020-002/
https://github.com/istio/istio/commits/master
https://istio.io/news/security/

Check your stack JSON