Lucene search
PRIOn knowledge basePRION:CVE-2023-34041HistorySep 08, 2023 - 8:15 a.m.
Design/Logic Flaw
2023-09-0808:15:00
PRIOn knowledge base
www.prio-n.com
8
cloud foundry
routing
vulnerability
http
hop-by-hop
header
abuse
identification value
logs
unauthenticated attacker
Cloud foundry routing release versions prior to 0.278.0 are vulnerable to abuse of HTTP Hop-by-Hop Headers. An unauthenticated attacker can use this vulnerability for headers like B3 or X-B3-SpanID to affect the identification value recorded in the logs in foundations.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cf-deployment | lt | 32.4.0 | |
| routing-release | lt | 0.278.0 |
Related
cve
cve
CVE-2023-34041
2023-09-08 08:15:07
osv
osv
CVE-2023-34041
2023-09-08 08:15:07
nvd
nvd
CVE-2023-34041
2023-09-08 08:15:07
cloudfoundry
cloudfoundry
cvelist
cvelist