Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40248
HistoryApr 21, 2023 - 10:18 a.m.

Information Disclosure

2023-04-2110:18:47
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6
cilium
information disclosure
debug mode
tls private keys
ingress
gatewayapi

0.0004 Low

EPSS

Percentile

9.1%

github.com/cilium/cilium is vulnerable to Information Disclosure. When running in debug mode, the Cilium agent may log secrets. Depending on the configuration of the impacted cluster, this includes TLS private keys for Ingress and GatewayAPI resources. The confidential data would be outputed when the Cilium agent restarted, when the secrets were updated, or when Ingress or GatewayAPI resources were created.

0.0004 Low

EPSS

Percentile

9.1%

Related for VERACODE:40248