es are vulnerable:</p><ul><li>1.1, 1.1.1, 1.1.2, 1.1.3, 1.1.4, 1.1.5, 1.1.6</li></ul><h2 id=impact-score>Impact score</h2><p>Overall CVSS score: 8.9 <a href="https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:H/RL:O/RC:C">AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N/E:H/RL:O/RC:C</a></p><h2 id=vulnerability-impact-and-detection>Vulnerability impact and Detection</h2><p>Since Istio 1.1, In the default Istio installation profile, policy enforcement is disabled by default.