Skip to content
OpenAdvisories
Unscored CVE-2021-22101 EUVD-2021-9262GHSA-cjhg-rj52-r938

Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated …

Published Oct 27, 2021 · Updated Aug 3, 2024 · Assigned by vmware

Description

Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated attackers to cause denial of service by using REST HTTP requests with label_selectors on multiple V3 endpoints by generating an enormous SQL query.

Affected products

VendorProductAffectedFixed
— Cloud Foundry Cloud Controller Cloud Foundry Cloud Controller versions prior to 1.118.0 —

References