Access Control Bypass

github.com/cilium/cilium is vulnerable to Access Control Bypass. The vulnerability is due to conflicting policy rules that allow a broader prefix denial rule to be ignored in favor of a narrower prefix rule when configurations such as enableDefaultDeny: false or toEntities: all are set. This...