Exploit Report

Computer Security And Bug Information

CVE-2023-30851

CVECVE-2023-30851
CVE Title
Published Date2023-05-25T18:15Z
Modified Date2023-06-01T20:35Z
CWE TypeNVD-CWE-noinfo
CVSS 3.xCVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
DescriptionCilium is a networking, observability, and security solution with an eBPF-based dataplane. This issue only impacts users who have a HTTP policy that applies to multiple `toEndpoints` AND have an allow-all rule in place that affects only one of those endpoints. In such cases, a wildcard rule will be appended to the set of HTTP rules, which could cause bypass of HTTP policies. This issue has been patched in Cilium 1.11.16, 1.12.9, and 1.13.2.
References
By clicking these links you will leave this website. We do not endorse and will not be held accountable for any activity on external sites.
Reference URLhttps://github.com/cilium/cilium/releases/tag/v1.13.2
Reference DescriptionMISC https://github.com/cilium/cilium/releases/tag/v1.13.2
Reference URLhttps://github.com/cilium/cilium/releases/tag/v1.11.16
Reference DescriptionMISC https://github.com/cilium/cilium/releases/tag/v1.11.16
Reference URLhttps://github.com/cilium/cilium/releases/tag/v1.12.9
Reference DescriptionMISC https://github.com/cilium/cilium/releases/tag/v1.12.9
Reference URLhttps://github.com/cilium/cilium/security/advisories/GHSA-2h44-x2wx-49f4
Reference DescriptionMISC https://github.com/cilium/cilium/security/advisories/GHSA-2h44-x2wx-49f4
TagsRelease Notes
Sources NIST MITRE

This site's data is aggregated programmatically and provided "as is" without any representations or warranties, express or implied. Exploit.report is not affiliated with the The MITRE Corporation, U.S. Department of Homeland Security (DHS), Cybersecurity and Infrastructure Security Agency (CISA), or US government in any way. CVE and the CVE logo are registered trademarks of The MITRE Corporation

© 2022 Exploit.Report | Data | Contact | Privacy Policy | Articles