rabilities that are initially reported as bugs instead of through the
<a href=/v1.5/pt-br/about/security-vulnerabilities/>private disclosure process</a>.</p><p>We tracked the bug to a code change introduced in Istio 1.1 and affecting all releases up to 1.1.6.</p><h2 id=impact-and-detection>Impact and detection</h2><p>Since Istio 1.1, In the default Istio installation profile, policy enforcement is disabled by default.</p><p>You can check the status of policy enforcement for your mesh with the following comm