CVE-2020-5416CWE-404

CF clusters with NGINX in front of them may be vulnerable to DoS

High · published August 21, 2020

CVSS v3.0
7.7
EPSS
1%
Percentile
69.1
In the wild
Unconfirmed
What it is

Cloud Foundry Routing (Gorouter), versions prior to 0.204.0, when used in a deployment with NGINX reverse proxies in front of the Gorouters, is potentially vulnerable to denial-of-service attacks in which an unauthenticated malicious attacker can send specially-crafted HTTP requests that may cause the Gorouters to be dropped from the NGINX backend pool.

The record
Technical detail
CVSS v3.0
7.7 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01245 · 69.1th percentile
Weakness
CWE-404 · Improper Resource Shutdown or Release
Published
2020-08-21T21:50Z
EPSS history
Timeline
  • 21 AUG 21:50Z
    CF clusters with NGINX in front of them may be vulnerable to DoS
    cvelistv5