VDB

CVE-2022-21654

CVE-2022-21654 PUBLISHED

Incorrect configuration handling allows TLS session re-use without re-validation in Envoy

EPSS 0.06% · 18.9th percentile

Risk Scores

EPSS Score
0.06%
18.9th percentile

Affected Products

VendorProductVersions
Bitnamienvoy1.21.0, 1.20.0, 1.7.0
Bitnamienvoy1.19.0, 1.20.0, 1.21.0

Timeline

  • Feb 22, 2022 CVE Published
  • Feb 23, 2022 EPSS Score
  • Apr 16, 2022 EPSS Score
  • Jun 7, 2022 EPSS Score
  • Jul 30, 2022 EPSS Score
  • Sep 19, 2022 EPSS Score
  • Nov 10, 2022 EPSS Score
  • Jan 1, 2023 EPSS Score
  • Feb 22, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 15, 2023 EPSS Score
  • Jun 6, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›