Vulnerabilities

TI-2022-11010 CVE-2022-28224 · GHSA-9394-xfq9-6qrp

Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature

LOW 26

Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature.

CVSS 3.1MEDIUM 5.5 Network High privileges No interaction EPSS 0.00615 Published 2022-06-06 Fixed in 3.22.2, 3.21.5 +1 CWE-200

TI-2020-10675 CVE-2020-13597 · GHSA-pf59-j7c2-rh6x

Calico nodes IPv6 traffic redirection from route advertisment

LOW 29

Clusters using Calico (version 3.14.0 and below), Calico Enterprise (version 2.8.2 and below), may be vulnerable to information disclosure if IPv6 is enabled but unused.

CVSS 3.1MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00902 Published 2020-06-03 Fixed in 3.14.1, 3.13.4 +5 CWE-201

Vulnerabilities

Filters

Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature

Calico nodes IPv6 traffic redirection from route advertisment