Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, apps are accessible via another port on diego cells, allowing application ingress without a client certificate. If mTLS route integrity is enabled AND unproxied ports are turned off, then an attacker could connect to an application that should be only reachable via mTLS, without presenting a client certificate.
oryginał ENCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:NCloudfoundry Cf Deployment
APPCloudfoundry17.1 – 23.2.0Cloudfoundry Diego
APPCloudfoundry2.55.0 – 2.69.0
Powiązane podatności
Cloud Foundry cf-deployment, versions prior to 7.9.0, contain java components that are using an insecure proto...
Cloud foundry instances having CAPI version between 1.140 and 1.152.0 along with loggregator-agent v7+ may ove...
Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerabil...
In UAA versions prior to 75.3.0, sensitive information like relaying secret of the provider was revealed in re...
CAPI (Cloud Controller) versions prior to 1.101.0 are vulnerable to a denial-of-service attack in which an una...