cvedb.io
CVE-2022-21654
HIGH · CVSS 7.4
EPSS exploitation probability: 0%
Published 2022-02-22T23:15:11.103 · Last modified 2026-06-17T04:26:41.617

Summary

Envoy is an open source edge and service proxy, designed for cloud-native applications. Envoy's tls allows re-use when some cert validation settings have changed from their default configuration. The only workaround for this issue is to ensure that default tls settings are used. Users are advised to upgrade.

Affected products

envoyproxy — envoy

Does this affect you?

Add your gear to cvedb and we'll alert you only when envoyproxy ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.