Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access
28Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 9.2epss 0.1%
probabilidade de exploração
0.1%top 97% das CVEs
exploração observada
nãonenhuma fonte reporta
Cilium is a networking, observability, and security solution. Prior to 1.17.14, 1.18.8, and 1.19.2, when Cilium L7 functionality is enabled, the embedded or standalone Envoy instance creates a world-accessible admin.sock on cluster nodes, allowing a local attacker to access Envoy admin endpoints, expose TLS secrets, disrupt cluster traffic, or terminate Envoy. This issue is fixed in versions 1.17.14, 1.18.8, and 1.19.2.
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:H
Produtos afetados
cilium · ciliumReferências
https://github.com/cilium/cilium/commit/7bfbdd5c1be83d6c9ba3e089b4c804b6603505b6https://github.com/cilium/cilium/pull/44512https://github.com/cilium/cilium/releases/tag/v1.17.14https://github.com/cilium/cilium/releases/tag/v1.18.8https://github.com/cilium/cilium/releases/tag/v1.19.2https://github.com/cilium/cilium/security/advisories/GHSA-3fcv-jvfp-m4q9