CVE-2020-5401 — Cloud Foundry GoRouter is vulnerable to cache poisoning

CVE-2020-5401

Cloud Foundry GoRouter is vulnerable to cache poisoning PUBLISHED

Description (CNA)

Cloud Foundry Routing Release, versions prior to 0.197.0, contains GoRouter, which allows malicious clients to send invalid headers, causing caching layers to reject subsequent legitimate clients trying to access the app.

Affected (CNA)

Vendor / product	Versions
Cloud Foundry / Routing	affected unspecified before 0.197.0

CWE

CWE-393

References

https://www.cloudfoundry.org/blog/cve-2020-5401

ADP enrichment

CVE

No English description supplied.

https://www.cloudfoundry.org/blog/cve-2020-5401