Detections
Analytics
SCA: security update for github.com/cilium/cilium (GHSA-24qp-4xx8-3jvj)
medium Tenable Cloud Security Plugin ID 421216
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Cilium is a networking, observability, and security solution with an eBPF-based dataplane. For Cilium
users who use Gateway API for Ingress for some services and use LB-IPAM or BGP for LB Service
implementation and use network policies to block egress traffic from workloads in a namespace to workloads
in other namespaces, egress traffic from workloads covered by such network policies to LoadBalancers
configured by `Gateway` resources will incorrectly be allowed. LoadBalancer resources not deployed via a
Gateway API configuration are not affected by this issue. This issue affects: Cilium v1.15 between v1.15.0
and v1.15.14 inclusive, v1.16 between v1.16.0 and v1.16.7 inclusive, and v1.17 between v1.17.0 and v1.17.1
inclusive. This issue is fixed in Cilium v1.15.15, v1.16.8, and v1.17.2. A Clusterwide Cilium Network
Policy can be used to work around this issue for users who are unable to upgrade. (CVE-2025-30162)
See Also
Plugin Details
Severity: Medium
ID: 421216
Version: Revision 1.15
Type: Local
Family: SCA Checks
Published: 3/25/2025
Updated: 6/1/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 1.2
Percentile: 0.01
Vendor
Vendor Severity: Low
CVSS v2
Risk Factor: Low
Base Score: 2.1
Temporal Score: 1.6
Vector: CVSS2#AV:L/AC:L/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2025-30162
CVSS v3
Risk Factor: Medium
Base Score: 4.3
Temporal Score: 3.8
Vector: CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 3/24/2025
Vulnerability Publication Date: 3/24/2025
Reference Information
CVE: CVE-2025-30162
cwe: CWE-863