{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-25631", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2024-02-08T22:26:33.512Z", "datePublished": "2024-02-20T18:08:56.946Z", "dateUpdated": "2024-08-26T14:46:55.989Z"}, "containers": {"cna": {"title": "Unencrypted traffic between pods when using Wireguard and an external kvstore", "problemTypes": [{"descriptions": [{"cweId": "CWE-311", "lang": "en", "description": "CWE-311: Missing Encryption of Sensitive Data", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4"}, {"name": "https://docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore", "tags": ["x_refsource_MISC"], "url": "https://docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore"}, {"name": "https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg", "tags": ["x_refsource_MISC"], "url": "https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg"}, {"name": "https://github.com/cilium/cilium/releases/tag/v1.14.7", "tags": ["x_refsource_MISC"], "url": "https://github.com/cilium/cilium/releases/tag/v1.14.7"}], "affected": [{"vendor": "cilium", "product": "cilium", "versions": [{"version": "< 1.14.7", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-02-20T18:08:56.946Z"}, "descriptions": [{"lang": "en", "value": "Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who have enabled an external kvstore and Wireguard transparent encryption, traffic between pods in the affected cluster is not encrypted. This issue affects Cilium v1.14 before v1.14.7 and has been patched in Cilium v1.14.7. There is no workaround to this issue."}], "source": {"advisory": "GHSA-x989-52fc-4vr4", "discovery": "UNKNOWN"}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:44:09.675Z"}, "title": "CVE Program Container", "references": [{"name": "https://github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4", "tags": ["x_refsource_CONFIRM", "x_transferred"], "url": "https://github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4"}, {"name": "https://docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore"}, {"name": "https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg"}, {"name": "https://github.com/cilium/cilium/releases/tag/v1.14.7", "tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/cilium/cilium/releases/tag/v1.14.7"}]}, {"affected": [{"vendor": "cilium", "product": "cilium", "cpes": ["cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*"], "defaultStatus": "unknown", "versions": [{"version": "0", "status": "affected", "lessThan": "1.14.7", "versionType": "custom"}]}], "metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2024-02-21T19:40:06.425184Z", "id": "CVE-2024-25631", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-26T14:46:55.989Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4", "name": "https://github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4", "tags": ["x_refsource_CONFIRM", "x_transferred"]}, {"url": "https://docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore", "name": "https://docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg", "name": "https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg", "tags": ["x_refsource_MISC", "x_transferred"]}, {"url": "https://github.com/cilium/cilium/releases/tag/v1.14.7", "name": "https://github.com/cilium/cilium/releases/tag/v1.14.7", "tags": ["x_refsource_MISC", "x_transferred"]}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-01T23:44:09.675Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-25631", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2024-02-21T19:40:06.425184Z"}}}], "affected": [{"cpes": ["cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*"], "vendor": "cilium", "product": "cilium", "versions": [{"status": "affected", "version": "0", "lessThan": "1.14.7", "versionType": "custom"}], "defaultStatus": "unknown"}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2024-08-26T14:46:36.675Z"}}], "cna": {"title": "Unencrypted traffic between pods when using Wireguard and an external kvstore", "source": {"advisory": "GHSA-x989-52fc-4vr4", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 6.1, "attackVector": "ADJACENT_NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}}], "affected": [{"vendor": "cilium", "product": "cilium", "versions": [{"status": "affected", "version": "< 1.14.7"}]}], "references": [{"url": "https://github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4", "name": "https://github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore", "name": "https://docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore", "tags": ["x_refsource_MISC"]}, {"url": "https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg", "name": "https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/cilium/cilium/releases/tag/v1.14.7", "name": "https://github.com/cilium/cilium/releases/tag/v1.14.7", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who have enabled an external kvstore and Wireguard transparent encryption, traffic between pods in the affected cluster is not encrypted. This issue affects Cilium v1.14 before v1.14.7 and has been patched in Cilium v1.14.7. There is no workaround to this issue."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-311", "description": "CWE-311: Missing Encryption of Sensitive Data"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2024-02-20T18:08:56.946Z"}}}, "cveMetadata": {"cveId": "CVE-2024-25631", "state": "PUBLISHED", "dateUpdated": "2024-08-26T14:46:55.989Z", "dateReserved": "2024-02-08T22:26:33.512Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2024-02-20T18:08:56.946Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:cilium:cilium:*:*:*:*:*:*:*:*", "matchCriteriaId": "C317482C-39AE-48CE-8BE0-22940C109354", "versionEndExcluding": "1.14.7", "versionStartIncluding": "1.14.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium users who have enabled an external kvstore and Wireguard transparent encryption, traffic between pods in the affected cluster is not encrypted. This issue affects Cilium v1.14 before v1.14.7 and has been patched in Cilium v1.14.7. There is no workaround to this issue."}, {"lang": "es", "value": "Cilium es una soluci\u00f3n de redes, observabilidad y seguridad con un plano de datos basado en eBPF. Para los usuarios de Cilium que han habilitado un kvstore externo y el cifrado transparente Wireguard, el tr\u00e1fico entre pods en el cl\u00faster afectado no est\u00e1 cifrado. Este problema afecta a Cilium v1.14 anterior a v1.14.7 y se ha solucionado en Cilium v1.14.7. No existe ning\u00fan workaround para este problema."}], "id": "CVE-2024-25631", "lastModified": "2024-12-18T17:17:13.857", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 4.0, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "HIGH", "attackVector": "ADJACENT_NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 1.6, "impactScore": 3.6, "source": "[email protected]", "type": "Primary"}]}, "published": "2024-02-20T18:15:53.117", "references": [{"source": "[email protected]", "tags": ["Product"], "url": "https://docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore"}, {"source": "[email protected]", "tags": ["Product"], "url": "https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg"}, {"source": "[email protected]", "tags": ["Release Notes"], "url": "https://github.com/cilium/cilium/releases/tag/v1.14.7"}, {"source": "[email protected]", "tags": ["Vendor Advisory"], "url": "https://github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://docs.cilium.io/en/stable/installation/k8s-install-external-etcd/#when-do-i-need-to-use-a-kvstore"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://docs.cilium.io/en/stable/security/network/encryption-wireguard/#encryption-wg"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Release Notes"], "url": "https://github.com/cilium/cilium/releases/tag/v1.14.7"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Vendor Advisory"], "url": "https://github.com/cilium/cilium/security/advisories/GHSA-x989-52fc-4vr4"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-311"}], "source": "[email protected]", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-319"}], "source": "[email protected]", "type": "Primary"}]}

{}