Not rated

CVE-2018-1221 In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket…

Description

In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load Balancers (ALBs) and some other HTTP-aware Load Balancers. A user with developer privileges could use this vulnerability to steal data or cause denial of service.

Affected products and versions

Product	Affected versions	Fixed in
The Cloud Foundry Gorouter	Versions not published

Do you use The Cloud Foundry Gorouter?

Track this CVE Watch The Cloud Foundry Gorouter Check my SBOMs

www.cveye.io/en/cve/CVE-2018-1221

Timeline

Published March 19, 2018
Last modified September 17, 2024

References

www.cloudfoundry.org www.cloudfoundry.org

Track this CVE