Back to search
CVE-2018-1221
Published: Mar 19, 2018
Modified: Sep 17, 2024
PUBLISHED
Description
In cf-deployment before 1.14.0 and routing-release before 0.172.0, the Cloud Foundry Gorouter mishandles WebSocket requests for AWS Application Load Balancers (ALBs) and some other HTTP-aware Load Balancers. A user with developer privileges could use this vulnerability to steal data or cause denial of service.
| Vendor | Product | Versions |
|---|---|---|
Dell EMC | The Cloud Foundry Gorouter | affected cf-deployment - All versions prior to 1.14.0affected routing-release - All versions prior to 0.172.0 |
References
https://www.cloudfoundry.org/blog/cve-2018-1221/
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now