-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/cilium/cilium | go | <= 1.10.13 | 1.10.14 |
| github.com/cilium/cilium | go | >= 1.11.0, <= 1.11.7 | 1.11.8 |
| github.com/cilium/cilium | go | = 1.12.0 | 1.12.1 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper separation of pod labels and namespace labels during policy evaluation. The commit references in release notes (5cacb1b, 5639787, 2494ce4) suggest fixes in policy resolution logic. Key functions in policy enforcement (resolvePolicyLocked) and identity labeling (GetIdentityLabels) are prime candidates, as they directly handle label matching. The high confidence for resolvePolicyLocked stems from its role in policy selection, while GetIdentityLabels is marked medium confidence due to indirect evidence from the attack vector description.