CVE-2023-30851

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. This issue only impacts users who have a HTTP policy that applies to multiple toEndpoints AND have an allow-all rule in place that affects only one of those endpoints. In such cases, a wildcard rule will be...

CVE-2023-30851 vulnerabilities

Vulnerabilities for packages: hubble-ui, cilium, cilium-fips...

CVE-2023-30851

CVE-2023-30851 affects Cilium’s eBPF dataplane. When a HTTP policy targets multiple toEndpoints and an allow-all rule affects only one endpoint, a wildcard rule is appended to the HTTP rules, potentially bypassing the policy. This issue has been patched in Cilium releases 1.11.16, 1.12.9, and 1.1...

CVE-2023-30851 Potential HTTP policy bypass when using header rules in Cilium

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. This issue only impacts users who have a HTTP policy that applies to multiple toEndpoints AND have an allow-all rule in place that affects only one of those endpoints. In such cases, a wildcard rule will be...