class=content>Please note that <code>RequestAuthentication</code> is used to define a list of issuers that should be accepted. It does not reject
a request without JWT token.</div></aside></div><p>For Istio, this vulnerability only exists if your service:</p><ul><li>Accepts JWT tokens (with <code>RequestAuthentication</code>)</li><li>Has some service paths without <code>AuthorizationPolicy</code> applied.</li></ul><p>For the service paths that both conditions are met, an incoming request with a JWT token, a