Lookup for vulnerabilities affecting packages.
| Vulnerability_id | VCID-dcqe-jeqh-7qc8 |
|---|
| Summary | Cilium is a networking, observability, and security solution with an eBPF-based dataplane. Starting in version 1.14.0 and prior to versions 1.14.8 and 1.15.2, In Cilium clusters with WireGuard enabled and traffic matching Layer 7 policies Wireguard-eligible traffic that is sent between a node's Envoy proxy and pods on other nodes is sent unencrypted and Wireguard-eligible traffic that is sent between a node's DNS proxy and pods on other nodes is sent unencrypted. This issue has been resolved in Cilium 1.14.8 and 1.15.2 in in native routing mode (`routingMode=native`) and in Cilium 1.14.4 in tunneling mode (`routingMode=tunnel`). Not that in tunneling mode, `encryption.wireguard.encapsulate` must be set to `true`. There is no known workaround for this issue. |
|---|
| Aliases |
| 0 |
|
| 1 |
| alias |
GHSA-v6q2-4qr3-5cw6 |
|
|
|---|
| Fixed_packages |
|
|---|
| Affected_packages |
|
|---|
| References |
|
|---|
| Weaknesses |
| 0 |
| cwe_id |
311 |
| name |
Missing Encryption of Sensitive Data |
| description |
The product does not encrypt sensitive or critical information before storage or transmission. |
|
| 1 |
| cwe_id |
319 |
| name |
Cleartext Transmission of Sensitive Information |
| description |
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors. |
|
|
|---|
| Exploits |
|
|---|
| Severity_range_score | 4.0 - 6.9 |
|---|
| Exploitability | null |
|---|
| Weighted_severity | null |
|---|
| Risk_score | null |
|---|
| Resource_url | http://public2.vulnerablecode.io/vulnerabilities/VCID-dcqe-jeqh-7qc8 |
|---|