Описание
Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated attacker can use this vulnerability to force route pruning and therefore degrade the service availability of the Cloud Foundry deployment.
Ссылки
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 0.28.0 (включая) до 33.5.0 (включая)Версия от 0.163.0 (включая) до 0.283.0 (включая)
Одно из
cpe:2.3:a:pivotal:cloud_foundry_deployment:*:*:*:*:*:*:*:*
cpe:2.3:a:pivotal:cloud_foundry_routing_release:*:*:*:*:*:*:*:*
EPSS
Процентиль: 39%
0.00171
Низкий
7.5 High
CVSS3
Дефекты
CWE-400
CWE-400
Связанные уязвимости
CVSS3: 7.5
github
около 2 лет назад
Cloud Foundry routing release versions from v0.163.0 to v0.283.0 are vulnerable to a DOS attack. An unauthenticated attacker can use this vulnerability to force route pruning and therefore degrade the service availability of the Cloud Foundry deployment.
EPSS
Процентиль: 39%
0.00171
Низкий
7.5 High
CVSS3
Дефекты
CWE-400
CWE-400