cilium-operator vulnerabilities (Bitnami)
36 vulnerabilities.
-
cilium-operatorBitnami Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match 5.4 Medium -
cilium-operatorBitnami Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces 5.9 Medium -
cilium-operatorBitnami CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation 6.9 Medium -
cilium-operatorBitnami Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access 9.2 Critical -
cilium-operatorBitnami Cillium exposes sensitive information included in the cilium-bugtool debug archive 7.9 High -
cilium-operatorBitnami Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic 5.4 Medium -
cilium-operatorBitnami Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled 6.1 Medium -
cilium-operatorBitnami Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic 4.0 Medium -
cilium-operatorBitnami Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters 4.0 Medium -
cilium-operatorBitnami Node based network policies may incorrectly allow workload traffic 3.4 Low -
cilium-operatorBitnami East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers 3.2 Low -
cilium-operatorBitnami Cilium vulnerable to information leakage via insecure default Hubble UI CORS header 6.5 Medium -
cilium-operatorBitnami DoS in Cilium agent DNS proxy from crafted DNS responses 5.3 Medium -
cilium-operatorBitnami Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium 5.8 Medium -
cilium-operatorBitnami CIDR deny policies may not take effect when a more narrow CIDR allow is present 4.0 Medium -
cilium-operatorBitnami Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API 5.4 Medium -
cilium-operatorBitnami Cilium agent's race condition may lead to policy bypass for Host Firewall policy 6.8 Medium -
cilium-operatorBitnami Cilium's Gateway API route matching order contradicts specification 4.0 Medium -
cilium-operatorBitnami Cilium leaks sensitive information in cilium-bugtool 7.9 High -
cilium-operatorBitnami Insecure IPsec transport encryption in Cilium 8.0 High -
cilium-operatorBitnami Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies 6.1 Medium -
cilium-operatorBitnami Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policies 6.1 Medium -
cilium-operatorBitnami Cilium intermittent HTTP policy bypass 7.2 High -
cilium-operatorBitnami Unencrypted traffic between pods when using Wireguard and an external kvstore 6.1 Medium -
cilium-operatorBitnami Cilium has unencrypted ingress/health traffic when using Wireguard transparent encryption 6.1 Medium -
cilium-operatorBitnami Denial of service via Kubernetes annotations in specific Cilium configurations 3.5 Low -
cilium-operatorBitnami Bypass of namespace restrictions in CiliumNetworkPolicy 6.9 Medium -
cilium-operatorBitnami Cilium NetworkPolicy bypass via pod labels 7.6 High -
cilium-operatorBitnami Cilium vulnerable to information leakage via incorrect ReferenceGrant handling 3.4 Low -
cilium-operatorBitnami Potential HTTP policy bypass when using header rules in Cilium 2.6 Low -
cilium-operatorBitnami Debug mode leaks confidential data in Cilium 7.2 High -
cilium-operatorBitnami Cilium eBPF filters may be temporarily removed during agent restart 6.5 Medium -
cilium-operatorBitnami Cilium vulnerable to potential network policy bypass when routing IPv6 traffic 4.2 Medium -
cilium-operatorBitnami cilium-agent container can access the host via `hostPath` mount 4.4 Medium -
cilium-operatorBitnami Improper Privilege Management in Cilium 7.5 High -
cilium-operatorBitnami Incorrect Default Permissions in Cilium 8.8 High