of Service (DOS) attacks. While
Istio by default enables these debug interfaces for profiling or enabling tools
like &ldquo;istioctl&rdquo;, they can be disabled by setting the environment variable
<code>ENABLE_DEBUG_ON_HTTP</code> to false as discussed above.</p><p>The report correctly points out that various utilities like <code>sudo</code>, <code>tcpdump</code>, etc.
installed in the default images shipped by Istio can lead to privilege
escalation attacks. These utilities are provided to aid runtime debu