Lucene search

K
cvelistPivotalCVELIST:CVE-2019-11289
HistoryNov 18, 2019 - 12:00 a.m.

CVE-2019-11289 A forged route service request using an invalid nonce can cause the gorouter to panic and crash

2019-11-1800:00:00
CWE-20
pivotal
raw.githubusercontent.com
4

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.1%

Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.

8.5 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.1%