Istio 1.8.0-1.9.5 and 1.10.0-1.10.1 - Unauthenticated Credential Access via Gateway and DestinationRule
Istio (1.8.x, 1.9.0-1.9.5 and 1.10.0-1.10.1) contains a remotely exploitable vulnerability where credentials specified in the Gateway and DestinationRule credentialName field can be accessed from different namespaces.