Database/Container, Kubernetes & orchestration
Cilium: cilium-bugtool output contains sensitive data
CVSS 7.9CVE-2024-37307Container, Kubernetes & orchestrationcurated
Impact
cilium-bugtool output contains sensitive data
Who can reach it
Anyone who receives a support bundle
What to do
Upgrade Cilium; treat existing bugtool archives as secret-bearing
References
Related entries
- Cilium: cilium-bugtool leaks sensitive data (recurrence of the 2024 issue)CVE-2026-41520 · CiliumHigh
- Cilium: An attacker able to update pod labels causes Cilium to apply the wrong network policyCVE-2023-39347 · CiliumHigh
- Cilium: After a container escape, an attacker can install eBPF programs and take over the node dataplaneCVE-2022-29179 · CiliumHigh
- Cilium: Debug mode logs the contents of the cilium-secrets namespace, including TLS private keysCVE-2023-29002 · CiliumHigh
- Cilium: HTTP policies not consistently applied to all trafficCVE-2024-28248 · CiliumHigh
- Cilium: A user who can create CiliumNetworkPolicy in one namespace affects traffic cluster-wideCVE-2023-41333 · CiliumMedium
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.