ers are exposed to this vulnerability in the following ways:</p><ul><li><p>Direct use of Envoy&rsquo;s <code>verify_subject_alt_name</code> and <code>match_subject_alt_names</code> configuration via <a href=/v1.17/docs/reference/config/networking/envoy-filter/>Envoy Filter</a>.</p></li><li><p>Use of Istio&rsquo;s <a href=/v1.17/docs/reference/config/networking/destination-rule/#ClientTLSSettings><code>subjectAltNames</code> field in destination rules with client TLS settings</a>. A destination rule with a <