high8.6
CVE-2019-11289
Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input.
Impact
Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cloudfoundry | Cf-Deployment | before 12.8.0 |
| Cloudfoundry | Routing-Release | before 0.193.0 |