CVE-2019-11289 — A forged route service request using an invalid nonce can cause the gorouter to panic and crash

CVE-2019-11289

A forged route service request using an invalid nonce can cause the gorouter to panic and crash PUBLISHED

Description (CNA)

Cloud Foundry Routing, all versions before 0.193.0, does not properly validate nonce input. A remote unauthenticated malicious user could forge an HTTP route service request using an invalid nonce that will cause the Gorouter to crash.

Affected (CNA)

Vendor / product	Versions
Cloud Foundry / Routing	affected All before 0.193.0

CWE

CWE-20

References

https://www.cloudfoundry.org/blog/cve-2019-11289

ADP enrichment

CVE

No English description supplied.

https://www.cloudfoundry.org/blog/cve-2019-11289