GoogleOSV:GO-2024-2569Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium
6.1 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%
Unencrypted traffic between pods when using Wireguard and an external kvstore in github.com/cilium/cilium
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/cilium/cilium | lt | 1.14.7 |
References
docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore
docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg
github.com/cilium/cilium/releases/tag/v1.14.7
github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4
nvd.nist.gov/vuln/detail/CVE-2024-25631
Related
6.1 Medium
CVSS3
Attack Vector
ADJACENT
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N
6.2 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
15.7%