iting our processes to flag vulnerabilities that are initially reported as bugs instead of through the
<a href=/v1.2/about/security-vulnerabilities/>private disclosure process</a>.</p><p>We tracked the bug to a code change introduced in Istio 1.1 and affecting all versions up to 1.1.6.</p><p>This vulnerability is referred to as <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-12243">CVE 2019-12243</a></p><h2 id=affected-istio-releases>Affected Istio releases</h2><p>The following Istio releas