Vulnerability Database

289,697

Total vulnerabilities in the database

CVE-2019-11289

Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.

CVSS v3:

  • Severity: High
  • Score: 8.6
  • AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CVSS v2:

  • Severity: High
  • Score: 7.8
  • AV:N/AC:L/Au:N/C:N/I:N/A:C

CWEs:

Software From Fixed in
cloudfoundry / routing-release - 0.193.0
cloudfoundry / cf-deployment - 12.8.0
code.cloudfoundry.org/gorouter - 0.0.0-20191101214924-b1b5c44e050f
github.com/cloudfoundry/gorouter - 0.0.0-20191101214924-b1b5c44e050f