CVE-2020-35470

—

CVSS 3.1

8.8 high

EPSS

<1%p60

Published

Dec 15, 2020 (Dec 15, 2020)

Modified

Jun 17, 2026

Description

Envoy before 1.16.1 logs an incorrect downstream address because it considers only the directly connected peer, not the information in the proxy protocol header. This affects situations with tcp-proxy as the network filter (not HTTP filters).

Vendors: envoyproxy
Products: envoy
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.