VYPR
Unrated severityNVD Advisory· Published Aug 21, 2020· Updated Sep 16, 2024

Cloud Controller may allow developers to claim sensitive routes

CVE-2020-5417

Description

Cloud Foundry CAPI (Cloud Controller), versions prior to 1.97.0, when used in a deployment where an app domain is also the system domain (which is true in the default CF Deployment manifest), were vulnerable to developers maliciously or accidentally claiming certain sensitive routes, potentially resulting in the developer's app handling some requests that were expected to go to certain system components.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Range: <1.97.0
  • Cloud Foundry/CAPIv5
    Range: All
  • Cloud Foundry/CF Deploymentv5
    Range: All

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.