CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0CVE-2023-34041 – CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter
https://notcve.org/view.php?id=CVE-2023-34041
08 Sep 2023 — Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerability for headers like B3 or X-B3-SpanID to affect the identification value recorded in the logs in foundations. Las versiones de lanzamiento de enrutamiento de Cloud Foundry anteriores a 0.278.0 son vulnerables al abuso de HTTP Hop-by-Hop Headers. Un atacante no autenticado puede usar esta vulnerabilidad para encabezados como B3 o X-B3-SpanID para afec... • https://www.cloudfoundry.org/blog/abuse-of-http-hop-by-hop-headers-in-cloud-foundry-gorouter •
CVSS: 5.3EPSS: 0%CPEs: 2EXPL: 0CVE-2021-22100
https://notcve.org/view.php?id=CVE-2021-22100
25 Mar 2022 — In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that (accidentally or maliciously) causes CC instances to timeout and fail is possible. An attacker can leverage this vulnerability to cause an inability for anyone to push or manage apps. En Cloud Foundry CAPI versiones anteriores a 1.122, es posible un ataque de denegación de servicio en el que un desarrollador puede empujar un corredor de servicio que (accidentalmente o maliciosamente)... • https://www.cloudfoundry.org/blog/cve-2021-22100-cloud-controller-is-vulnerable-to-denial-of-service-due-to-misbehaving-service-brokers • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.5EPSS: 1%CPEs: 2EXPL: 0CVE-2021-22101
https://notcve.org/view.php?id=CVE-2021-22101
27 Oct 2021 — Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated attackers to cause denial of service by using REST HTTP requests with label_selectors on multiple V3 endpoints by generating an enormous SQL query. Cloud Controller versiones anteriores a 1.118.0, son vulnerables a una vulnerabilidad de denegación de servicio (DoS) no autenticada que permite a atacantes no autenticados causar una denegación de servicio mediante el uso de... • https://www.cloudfoundry.org/blog/cve-2021-22101-cloud-controller-is-vulnerable-to-unauthenticated-denial-of-service • CWE-400: Uncontrolled Resource Consumption •
CVSS: 6.1EPSS: 0%CPEs: 2EXPL: 0CVE-2021-22098
https://notcve.org/view.php?id=CVE-2021-22098
11 Aug 2021 — UAA server versions prior to 75.4.0 are vulnerable to an open redirect vulnerability. A malicious user can exploit the open redirect vulnerability by social engineering leading to take over of victims’ accounts in certain cases along with redirection of UAA users to a malicious sites. UAA server versiones anteriores a 75.4.0, son susceptibles a una vulnerabilidad de redireccionamiento abierto. Un usuario malicioso puede explotar la vulnerabilidad de redireccionamiento abierto mediante ingeniería social, con... • https://www.cloudfoundry.org/blog/cve-2021-22098-open-redirect-vulnerability-in-uaa-server • CWE-601: URL Redirection to Untrusted Site ('Open Redirect') •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-22001
https://notcve.org/view.php?id=CVE-2021-22001
22 Jul 2021 — In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in response when deletion request of an identity provider( IdP) of type “oauth 1.0” was sent to UAA server. En UAA versiones anteriores a 75.3.0, se ha revelado información confidencial como el secreto de retransmisión del proveedor en respuesta cuando se enviaba al servidor de UAA una petición de eliminación de un proveedor de identidades (IdP) de tipo "oauth 1.0" • https://www.cloudfoundry.org/blog/cve-2021-22001-sensitive-info-leakage-in-uaa-during-identity-provider-deletion • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2021-22115
https://notcve.org/view.php?id=CVE-2021-22115
08 Apr 2021 — Cloud Controller API versions prior to 1.106.0 logs service broker credentials if the default value of db logging config field is changed. CAPI database logs service broker password in plain text whenever a job to clean up orphaned items is run by Cloud Controller. Cloud Controller API versiones anteriores a 1.106.0, registran las credenciales del agente de servicio si el valor predeterminado del campo de configuración de registro de la base de datos es cambiado. La base de datos CAPI registra la contr... • https://www.cloudfoundry.org/blog/cve-2021-22115-capi-logs-service-broker-credentials • CWE-522: Insufficiently Protected Credentials •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-5423 – Cloud Controller is vulnerable to denial of service via YAML parsing
https://notcve.org/view.php?id=CVE-2020-5423
02 Dec 2020 — CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an unauthenticated malicious attacker can send specially-crafted YAML files to certain endpoints, causing the YAML parser to consume excessive CPU and RAM. CAPI (Cloud Controller) versiones anteriores a 1.101.0, son vulnerables a un ataque de denegación de servicio en el que un atacante malicioso no autenticado puede enviar archivos YAML especialmente diseñados a determinados endpoints, causando a un anal... • https://www.cloudfoundry.org/blog/cve-2020-5423 • CWE-400: Uncontrolled Resource Consumption •
CVSS: 7.7EPSS: 0%CPEs: 2EXPL: 0CVE-2020-5420 – Gorouter is vulnerable to DoS attack via invalid HTTP responses
https://notcve.org/view.php?id=CVE-2020-5420
03 Sep 2020 — Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters. Cloud Foundry Routing (Gorouter) versiones anteriores a 0.206.0, permiten a un desarrollador malicioso con acceso "cf push" causar una denegación de servicio al clúster CF al presionar una aplicación que devuelve respuestas HTTP especialmente diseñadas que bloquean lo... • https://www.cloudfoundry.org/blog/cve-2020-5420 • CWE-754: Improper Check for Unusual or Exceptional Conditions •
CVSS: 4.3EPSS: 0%CPEs: 2EXPL: 0CVE-2020-5418 – Cloud Controller allows users with no roles to list droplets
https://notcve.org/view.php?id=CVE-2020-5418
03 Sep 2020 — Cloud Foundry CAPI (Cloud Controller) versions prior to 1.98.0 allow authenticated users having only the "cloud_controller.read" scope, but no roles in any spaces, to list all droplets in all spaces (whereas they should see none). Cloud Foundry CAPI (Cloud Controller) versiones anteriores a 1.98.0, permiten a usuarios autenticados que solo tienen el alcance de "cloud_controller.read", pero sin roles en ningún espacio, listar todos los droplets en todos los espacios (mientras que no deberían visualizar ningu... • https://www.cloudfoundry.org/blog/cve-2020-5418 • CWE-863: Incorrect Authorization •
CVSS: 8.8EPSS: 0%CPEs: 2EXPL: 0CVE-2020-5417 – Cloud Controller may allow developers to claim sensitive routes
https://notcve.org/view.php?id=CVE-2020-5417
21 Aug 2020 — Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the default CF Deployment manifest), were vulnerable to developers maliciously or accidentally claiming certain sensitive routes, potentially resulting in the developer's app handling some requests that were expected to go to certain system components. Cloud Foundry CAPI (Cloud Controller), versiones anteriores a 1.97.0, cuando se usaba en una implementac... • https://www.cloudfoundry.org/blog/cve-2020-5417 • CWE-732: Incorrect Permission Assignment for Critical Resource •