CVE-2021-3499

CVE-2021-3499

Vendor N/A
Product openshift/ovn-kubernetes
Weakness CWE-863 · Incorrect authorization
Published June 2, 2021
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

A vulnerability was found in OVN Kubernetes in versions up to and including 0.3.0 where the Egress Firewall does not reliably apply firewall rules when there is multiple DNS rules. It could lead to potentially lose of confidentiality, integrity or availability of a service.

Key dates

02Disclosure timeline

June 2, 2021 CVE published
August 3, 2024 Record updated