7.2

CVE-2023-29002: Debug mode leaks confidential data in Cilium

Modified
AliasesCGA-4xh4-6j3r-4pf7CGA-56vq-wq57-97rrGHSA-pg5p-wwp8-97g8
Published 18-04-2023Last modified 05-02-2025

Vulnerability summary

CVE-2023-29002 is a high (CVSS 7.2) vulnerability in cilium. EPSS estimates a 0.20% chance of exploitation in the next 30 days, higher than 8.9% of scored vulnerabilities.

Overall risk
29/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.2/10
010
High · v3.1 (CVE.org)
EPSS score
0.20%
0%100%
Low · 0.00 pp in 30 days
KEVNot listedNot listed by any tracked catalog.
RansomwareNot flaggedNo ransomware use recorded.
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Related 2
CGA-FJ6G-VFCQ-GJ78CGA-QXFM-F7GH-RJXJ

Timeline

  1. 18-04-2023
    PublishedVulnerability first disclosed.
  2. 05-02-2025
    Last modifiedVulnerability information updated.

Description

Cilium is a networking, observability, and security solution with an eBPF-based dataplane. When run in debug mode, Cilium will log the contents of the `cilium-secrets` namespace. This could include data such as TLS private keys for Ingress and GatewayAPI resources. An attacker with access to debug output from the Cilium containers could use the resulting output to intercept and modify traffic to and from the affected cluster. Output of the sensitive information would occur at Cilium agent restart, when secrets in the namespace are modified, and on creation of Ingress or GatewayAPI resources. This vulnerability is fixed in Cilium releases 1.11.16, 1.12.9, and 1.13.2. Users unable to upgrade should disable debug mode.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.20%

Chance of exploitation in the next 30 days

Percentile

9%

Versus all other CVEs

30-day change

No change 0.00 pp

From 0.20% on 22-09-2026

22-09-202622-10-2026

Known exploited

Compare KEV catalogs
CISA KEV

Not in the CISA KEV catalog.

ENISA CNW

Not in the ENISA CNW catalog.

CIRCL

Not in the CIRCL catalog.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard1 product
  • hubble-ui-backend< 0.12.0-r0
Cilium1 product
  • cilium≥ 1.7, < 1.11.16 | ≥ 1.7.0, < 1.11.16 | ≥ 1.12.0, < 1.12.9 | ≥ 1.13.0, < 1.13.2
Github.com/cilium1 product
  • cilium≥ 1.7.0, ≤ 1.10.0 | ≥ 1.11.0, < 1.11.16 | ≥ 1.12.0, < 1.12.9 | ≥ 1.13.0, < 1.13.2
Wolfi1 product
  • hubble-ui-backend< 0.12.0-r0

4 vendors · 4 products

References

4 links