CVE-2021-22101CWE-400

Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated attackers to cause…

published October 27, 2021

CVSS
—
EPSS
1%
Percentile
62.6
In the wild
Unconfirmed
What it is

Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated attackers to cause denial of service by using REST HTTP requests with label_selectors on multiple V3 endpoints by generating an enormous SQL query.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01004 · 62.6th percentile
Weakness
CWE-400 · Uncontrolled Resource Consumption
Published
2021-10-27T14:18Z
EPSS history
Timeline
  • 27 OCT 14:18Z
    Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated attackers to cause…
    cvelistv5