CVE-2025-23047 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...

CVE-2025-23047 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...

CVE-2025-23047

CVE-2025-23047 affects Cilium with Hubble UI when deployed; insecure default Access-Control-Allow-Origin header can expose cluster configuration. Affected: 1.14.0–1.14.7, 1.15.0–1.15.11, 1.16.0–1.16.4. Exploit requires visiting a malicious page; could reveal Kubernetes cluster details (node names...

CVE-2025-23047 Cilium vulnerable to information leakage via insecure default Hubble UI CORS header

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...

CVE-2025-23028 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

CVE-2025-23028 vulnerabilities

Vulnerabilities for packages: hubble-ui...

CVE-2025-23047: Exposure of Sensitive Information to an Unauthorized Actor

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default Access-Control-Allow-Origin header value could lead to sensitive data exposure for users of Cilium versions 1.14.0 through 1.14.7, 1.15.0 through 1.15.11, and 1.16.0 through 1.16.4 who...

PT-2025-4791

Name of the Vulnerable Software and Affected Versions Cilium versions 1.14.0 through 1.14.7 Cilium versions 1.15.0 through 1.15.11 Cilium versions 1.16.0 through 1.16.4 Description Cilium is a networking, observability, and security solution with an eBPF-based dataplane. An insecure default...

GHSA-XG58-75QF-9R67 vulnerabilities

Vulnerabilities for packages: hubble...

GHSA-XG58-75QF-9R67 vulnerabilities

Vulnerabilities for packages: cilium, hubble, hubble-fips, cilium-fips...

CVE-2024-52529 vulnerabilities

Vulnerabilities for packages: cilium, hubble, hubble-fips, cilium-fips...

CVE-2024-52529 vulnerabilities

Vulnerabilities for packages: hubble...

CVE-2024-47825 vulnerabilities

Vulnerabilities for packages: hubble-ui...

CVE-2024-47825 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GHSA-3WWX-63FV-PFQ6 vulnerabilities

Vulnerabilities for packages: hubble-ui-backend-fips, hubble-ui...

GHSA-3WWX-63FV-PFQ6 vulnerabilities

Vulnerabilities for packages: hubble-ui...

CVE-2024-48798

An issue in Hubble Connected com.hubbleconnected.vervelife 2.00.81 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48798: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Hubble Connected com.hubbleconnected.vervelife 2.00.81 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48798

An issue in Hubble Connected com.hubbleconnected.vervelife 2.00.81 allows a remote attacker to obtain sensitive information via the firmware update process...

CVE-2024-48798

A security vulnerability exists in Hubble Connected (com.hubbleconnected.vervelife) version 2.00.81 . A remote attacker can exploit this issue to obtain sensitive information through the firmware update process . To mitigate risk, it is recommended to disable the firmware update process until a p...