CVE-2023-30851

MEDIUM Year: 2023
CVSS v3 Score
5.3
Medium
Weakness Type
CWE-693
View all →

Vulnerability Description

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. This issue only impacts users who have a HTTP policy that applies to multiple `toEndpoints` AND have an allow-all rule in place that affects only one of those endpoints. In such cases, a wildcard rule will be appended to the set of HTTP rules, which could cause bypass of HTTP policies. This issue has been patched in Cilium 1.11.16, 1.12.9, and 1.13.2.

Related Vulnerabilities

CVE-2013-0431

MEDIUM
CVSS:5.3(Medium)

Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the Java security sandbo...

CWE-6932013

CVE-2014-125107

MEDIUM
CVSS:5.3(Medium)

A vulnerability was found in Corveda PHPSandbox 1.3.4 and classified as critical. Affected by this issue is some unknown functionality of the component String Handler. The manipulation leads to protec...

CWE-6932014

CVE-2018-0138

MEDIUM
CVSS:5.3(Medium)

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass file policies that are configured to block files transmitted to an ...

CWE-6932018

CVE-2018-0198

MEDIUM
CVSS:5.3(Medium)

A vulnerability in the web framework of Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to view sensitive data. The vulnerability is due to insufficient protection...

CWE-6932018

CVE-2018-0254

MEDIUM
CVSS:5.3(Medium)

A vulnerability in the detection engine of Cisco Firepower System Software could allow an unauthenticated, remote attacker to bypass configured file action policies if an Intelligent Application Bypas...

CWE-6932018

CVE-2018-6794

MEDIUM
CVSS:5.3(Medium)

Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends data before the 3-way handshake is compl...

CWE-6932018