GHSA-r7wr-4w5q-55m6

Dashboard / Vulnerabilities / GHSA-r7wr-4w5q-55m6

GHSA-r7wr-4w5q-55m6

Summary: Cilium vulnerable to information leakage via incorrect ReferenceGrant handling

Details: ### Impact When the [Gateway API](https://docs.cilium.io/en/v1.13/network/servicemesh/gateway-api/gateway-api/) is enabled in Cilium, the absence of a check on the namespace in which a [ReferenceGrant](https://gateway-api.sigs.k8s.io/api-types/referencegrant/) is created could result in Cilium gaining visibility of secrets (including certificates) and services across namespaces. An attacker on an affected cluster can configure Cilium to use cluster secrets or communicate with services that it should not have access to. Gateway API functionality is disabled by default. ### Patches This vulnerability is fixed in Cilium release 1.13.4. Cilium versions <1.13 are not affected. ### Workarounds There is no workaround to this issue. ### Acknowledgements The Cilium community has worked together with members of Isovalent to prepare these mitigations. Special thanks to @meyskens for investigating and fixing the issue. ### For more information If you have any questions or comments about this advisory, please reach out on [Slack](https://docs.cilium.io/en/latest/community/community/#slack). As usual, if you think you found a related vulnerability, we strongly encourage you to report security vulnerabilities to our private security mailing list: [[email protected]](mailto:[email protected]) - first, before disclosing them in any public forums. This is a private mailing list where only members of the Cilium internal security team are subscribed to, and is treated as top priority.

References: https://github.com/cilium/cilium/security/advisories/GHSA-r7wr-4w5q-55m6, https://nvd.nist.gov/vuln/detail/CVE-2023-34242, https://github.com/cilium/cilium, https://github.com/cilium/cilium/releases/tag/v1.13.4