hubble-relay vulnerabilities (Bitnami)
36 vulnerabilities.
-
hubble-relayBitnami Cilium may unexpectedly allow ingress traffic from the local namespace when a Kubernetes NetworkPolicy is configured with an ipBlock match 5.4 Medium -
hubble-relayBitnami Cilium: Namespaced HTTPRoutes can redirect traffic to other namespaces 5.9 Medium -
hubble-relayBitnami CiliumLocalRedirectPolicy addressMatcher allows cross-namespace service traffic hijacking and can break service translation 6.9 Medium -
hubble-relayBitnami Cilium: Sensitive information disclosure and cluster disruption via local Envoy admin socket access 9.2 Critical -
hubble-relayBitnami Cillium exposes sensitive information included in the cilium-bugtool debug archive 7.9 High -
hubble-relayBitnami Cilium L7 proxy may bypass Kubernetes NetworkPolicy for same-node traffic 5.4 Medium -
hubble-relayBitnami Cilium may not enforce host firewall policies when Native Routing, WireGuard and Node Encryption are enabled 6.1 Medium -
hubble-relayBitnami Cilium with misconfigured toGroups in policies can lead to unrestricted egress traffic 4.0 Medium -
hubble-relayBitnami Cilium packets from terminating endpoints may not be encrypted in Wireguard-enabled clusters 4.0 Medium -
hubble-relayBitnami Node based network policies may incorrectly allow workload traffic 3.4 Low -
hubble-relayBitnami East-west traffic not subject to egress policy enforcement for requests via Gateway API load balancers 3.2 Low -
hubble-relayBitnami Cilium vulnerable to information leakage via insecure default Hubble UI CORS header 6.5 Medium -
hubble-relayBitnami DoS in Cilium agent DNS proxy from crafted DNS responses 5.3 Medium -
hubble-relayBitnami Layer 7 policy enforcement may not occur in policies with wildcarded port ranges in Cilium 5.8 Medium -
hubble-relayBitnami CIDR deny policies may not take effect when a more narrow CIDR allow is present 4.0 Medium -
hubble-relayBitnami Cilium vulnerable to information leakage via incorrect ReferenceGrant update logic in Gateway API 5.4 Medium -
hubble-relayBitnami Cilium agent's race condition may lead to policy bypass for Host Firewall policy 6.8 Medium -
hubble-relayBitnami Cilium's Gateway API route matching order contradicts specification 4.0 Medium -
hubble-relayBitnami Cilium leaks sensitive information in cilium-bugtool 7.9 High -
hubble-relayBitnami Insecure IPsec transport encryption in Cilium 8.0 High -
hubble-relayBitnami Cilium has possible unencrypted traffic between nodes when using WireGuard and L7 policies 6.1 Medium -
hubble-relayBitnami Cilium has possible unencrypted traffic between nodes when using IPsec and L7 policies 6.1 Medium -
hubble-relayBitnami Cilium intermittent HTTP policy bypass 7.2 High -
hubble-relayBitnami Unencrypted traffic between pods when using Wireguard and an external kvstore 6.1 Medium -
hubble-relayBitnami Cilium has unencrypted ingress/health traffic when using Wireguard transparent encryption 6.1 Medium -
hubble-relayBitnami Denial of service via Kubernetes annotations in specific Cilium configurations 3.5 Low -
hubble-relayBitnami Bypass of namespace restrictions in CiliumNetworkPolicy 6.9 Medium -
hubble-relayBitnami Cilium NetworkPolicy bypass via pod labels 7.6 High -
hubble-relayBitnami Cilium vulnerable to information leakage via incorrect ReferenceGrant handling 3.4 Low -
hubble-relayBitnami Potential HTTP policy bypass when using header rules in Cilium 2.6 Low -
hubble-relayBitnami Debug mode leaks confidential data in Cilium 7.2 High -
hubble-relayBitnami Cilium eBPF filters may be temporarily removed during agent restart 6.5 Medium -
hubble-relayBitnami Cilium vulnerable to potential network policy bypass when routing IPv6 traffic 4.2 Medium -
hubble-relayBitnami cilium-agent container can access the host via `hostPath` mount 4.4 Medium -
hubble-relayBitnami Improper Privilege Management in Cilium 7.5 High -
hubble-relayBitnami Incorrect Default Permissions in Cilium 8.8 High