Skip to content
CVE PROGRAM SOURCE RECORD5.3 Medium

CVE-2023-34041

CVE-2023-34041-Abuse of HTTP Hop-by-Hop Headers in Cloud Foundry Gorouter

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
vmware

Description

Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerability for headers like B3 or X-B3-SpanID to affect the identification value recorded in the logs in foundations.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Cloud Foundry Routing

Default version status: unaffected

  • all to < 0.278.0affected

Cloud Foundry CF Deployment

Default version status: unaffected

  • all to < 32.4.0affected

References