CVE-2024-28249
CVSS 3.1 Score 6.1 of 10 (medium)
Details
Summary
CVE-2024-28249 is a vulnerability in Cilium, a networking, observability, and security solution with an eBPF-based dataplane. Versions prior to 1.13.13, 1.14.8, and 1.15.2 of Cilium are affected. In Cilium clusters with IPsec enabled and traffic matching Layer 7 policies, IPsec-eligible traffic between a node's Envoy proxy and pods on other nodes is sent unencrypted, as well as IPsec-eligible traffic between a node's DNS proxy and pods on other nodes. This issue has been resolved in the latest versions of Cilium (1.15.2, 1.14.8, and 1.13.13), but there is no known workaround for this vulnerability. The potential danger this vulnerability poses to an organization is high confidentiality impact, as the unencrypted traffic can be intercepted by malicious actors in adjacent networks. (Source: Security Advisories @ GitHub)
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Advisories, Assessments, and Mitigations
Prioritize, Pinpoint, and Act to Prevent Vulnerability Exploits with Recorded Future
- Gain complete coverage of your cyber, third party, and physical attack surface
- Proactively mitigate threats before they turn into costly attacks
- Make fast, effective, data-driven decisions