CVE-2018-1070CWE-20

routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought…

Medium · published June 12, 2018

CVSS v3.0
6.5
EPSS
1%
Percentile
57.8
In the wild
Unconfirmed
What it is

routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought down. A malicious user can use this vulnerability to cause a Denial of Service attack for other users of the router shard.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00859 · 57.8th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2018-06-12T13:00Z
EPSS history
Timeline
  • 12 JUN 13:00Z
    routing before version 3.10 is vulnerable to an improper input validation of the Openshift Routing configuration which can cause an entire shard to be brought…
    cvelistv5