Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2018-1221

In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load Balancers (ALBs) and some other

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
dell

Description

In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load Balancers (ALBs) and some other HTTP-aware Load Balancers. A user with developer privileges could use this vulnerability to steal data or cause denial of service.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell EMC The Cloud Foundry Gorouter

  • cf-deployment - All versions prior to 1.14.0affected
  • routing-release - All versions prior to 0.172.0affected

References