GoogleOSV:BIT-HUBBLE-RELAY-2024-28248BIT-hubble-relay-2024-28248
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
6.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.1%
Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.13.9 and prior to versions 1.13.13, 1.14.8, and 1.15.2, Cilium’s HTTP policies are not consistently applied to all traffic in the scope of the policies, leading to HTTP traffic being incorrectly and intermittently forwarded when it should be dropped. This issue has been patched in Cilium 1.15.2, 1.14.8, and 1.13.13. There are no known workarounds for this issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| hubble-relay | ge | 1.13.9 | |
| hubble-relay | ge | 1.14.0 | |
| hubble-relay | lt | 1.15.2 | |
| hubble-relay | lt | 1.13.13 | |
| hubble-relay | ge | 1.15.0 | |
| hubble-relay | lt | 1.14.8 |
Related
7.2 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N
6.7 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
48.1%