Vulnerabilities > CVE-2020-5420 - Improper Check for Unusual or Exceptional Conditions vulnerability in Cloudfoundry Cf-Deployment and Gorouter

CVSS 7.7 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

LOW

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

cloudfoundry

CWE-754

NVD

Published: 2020-09-03

Updated: 2020-09-11

Summary

Cloud Foundry Routing (Gorouter) versions prior to 0.206.0 allow a malicious developer with "cf push" access to cause denial-of-service to the CF cluster by pushing an app that returns specially crafted HTTP responses that crash the Gorouters.

Vulnerable Configurations

Part	Description	Count
Application	Cloudfoundry Cloudfoundry Gorouter * Cloudfoundry CF Deployment - Cloudfoundry CF Deployment 0.0.0 Cloudfoundry CF Deployment 0.0.1 Cloudfoundry CF Deployment 0.0.2 Cloudfoundry CF Deployment 0.1.0 Cloudfoundry CF Deployment 0.2.0 Cloudfoundry CF Deployment 0.2.1 Cloudfoundry CF Deployment 0.2.2 Cloudfoundry CF Deployment 0.3.0 Cloudfoundry CF Deployment 0.4.0 Cloudfoundry CF Deployment 0.5.0 Cloudfoundry CF Deployment 0.7.0 Cloudfoundry CF Deployment 0.8.0 Cloudfoundry CF Deployment 0.9.0 Cloudfoundry CF Deployment 0.9.1 Cloudfoundry CF Deployment 0.10.0 Cloudfoundry CF Deployment 0.11.0 Cloudfoundry CF Deployment 0.12.0 Cloudfoundry CF Deployment 0.13.0 Cloudfoundry CF Deployment 0.14.0 Cloudfoundry CF Deployment 0.15.0 Cloudfoundry CF Deployment 0.16.0 Cloudfoundry CF Deployment 0.17.0 Cloudfoundry CF Deployment 0.18.0 Cloudfoundry CF Deployment 0.19.0 Cloudfoundry CF Deployment 0.20.0 Cloudfoundry CF Deployment 0.21.0 Cloudfoundry CF Deployment 0.22.0 Cloudfoundry CF Deployment 0.23.0 Cloudfoundry CF Deployment 0.24.0 Cloudfoundry CF Deployment 0.25.0 Cloudfoundry CF Deployment 0.26.0 Cloudfoundry CF Deployment 0.27.0 Cloudfoundry CF Deployment 0.28.0 Cloudfoundry CF Deployment 0.29.0 Cloudfoundry CF Deployment 0.30.0 Cloudfoundry CF Deployment 0.31.0 Cloudfoundry CF Deployment 0.32.0 Cloudfoundry CF Deployment 0.32.1 Cloudfoundry CF Deployment 0.33.0 Cloudfoundry CF Deployment 0.34.0 Cloudfoundry CF Deployment 0.35.0 Cloudfoundry CF Deployment 0.36.0 Cloudfoundry CF Deployment 0.37.0 Cloudfoundry CF Deployment 1.0.0 Cloudfoundry CF Deployment 1.1.0 Cloudfoundry CF Deployment 1.2.0 Cloudfoundry CF Deployment 1.3.0 Cloudfoundry CF Deployment 1.3.1 Cloudfoundry CF Deployment 1.4.0 Cloudfoundry CF Deployment 1.5.0 Cloudfoundry CF Deployment 1.6.0 Cloudfoundry CF Deployment 1.7.0 Cloudfoundry CF Deployment 1.8.0 Cloudfoundry CF Deployment 1.9.0 Cloudfoundry CF Deployment 1.10.0 Cloudfoundry CF Deployment 1.11.0 Cloudfoundry CF Deployment 1.12.0 Cloudfoundry CF Deployment 1.13.0 Cloudfoundry CF Deployment 1.14.0 Cloudfoundry CF Deployment 1.15.0 Cloudfoundry CF Deployment 1.16.0 Cloudfoundry CF Deployment 1.17.0 Cloudfoundry CF Deployment 1.18.0 Cloudfoundry CF Deployment 1.19.0 Cloudfoundry CF Deployment 1.20.0 Cloudfoundry CF Deployment 1.21.0 Cloudfoundry CF Deployment 1.22.0 Cloudfoundry CF Deployment 1.23.0 Cloudfoundry CF Deployment 1.24.0 Cloudfoundry CF Deployment 1.25.0 Cloudfoundry CF Deployment 1.26.0 Cloudfoundry CF Deployment 1.27.0 Cloudfoundry CF Deployment 1.28.0 Cloudfoundry CF Deployment 1.29.0 Cloudfoundry CF Deployment 1.30.0 Cloudfoundry CF Deployment 1.31.0 Cloudfoundry CF Deployment 1.32.0 Cloudfoundry CF Deployment 1.33.0 Cloudfoundry CF Deployment 1.34.0 Cloudfoundry CF Deployment 1.35.0 Cloudfoundry CF Deployment 1.36.0 Cloudfoundry CF Deployment 1.37.0 Cloudfoundry CF Deployment 1.38.0 Cloudfoundry CF Deployment 1.39.0 Cloudfoundry CF Deployment 1.40.0 Cloudfoundry CF Deployment 2.0.0 Cloudfoundry CF Deployment 2.1.0 Cloudfoundry CF Deployment 2.2.0 Cloudfoundry CF Deployment 2.3.0 Cloudfoundry CF Deployment 2.4.0 Cloudfoundry CF Deployment 2.5.0 Cloudfoundry CF Deployment 2.6.0 Cloudfoundry CF Deployment 2.7.0 Cloudfoundry CF Deployment 2.8.0 Cloudfoundry CF Deployment 2.9.0 Cloudfoundry CF Deployment 3.0.0 Cloudfoundry CF Deployment 3.1.0 Cloudfoundry CF Deployment 3.2.0 Cloudfoundry CF Deployment 3.3.0 Cloudfoundry CF Deployment 3.4.0 Cloudfoundry CF Deployment 3.5.0 Cloudfoundry CF Deployment 3.6.0 Cloudfoundry CF Deployment 4.0.0 Cloudfoundry CF Deployment 4.1.0 Cloudfoundry CF Deployment 4.2.0 Cloudfoundry CF Deployment 4.3.0 Cloudfoundry CF Deployment 4.4.0 Cloudfoundry CF Deployment 4.5.0 Cloudfoundry CF Deployment 5.0.0 Cloudfoundry CF Deployment 5.1.0 Cloudfoundry CF Deployment 5.2.0 Cloudfoundry CF Deployment 5.3.0 Cloudfoundry CF Deployment 5.4.0 Cloudfoundry CF Deployment 5.5.0 Cloudfoundry CF Deployment 6.0.0 Cloudfoundry CF Deployment 6.1.0 Cloudfoundry CF Deployment 6.2.0 Cloudfoundry CF Deployment 6.3.0 Cloudfoundry CF Deployment 6.4.0 Cloudfoundry CF Deployment 6.5.0 Cloudfoundry CF Deployment 6.6.0 Cloudfoundry CF Deployment 6.7.0 Cloudfoundry CF Deployment 6.8.0 Cloudfoundry CF Deployment 6.9.0 Cloudfoundry CF Deployment 6.10.0 Cloudfoundry CF Deployment 7.0.0 Cloudfoundry CF Deployment 7.1.0 Cloudfoundry CF Deployment 7.2.0 Cloudfoundry CF Deployment 7.3.0 Cloudfoundry CF Deployment 7.4.0 Cloudfoundry CF Deployment 7.5.0 Cloudfoundry CF Deployment 7.6.0 Cloudfoundry CF Deployment 7.7.0 Cloudfoundry CF Deployment 7.8.0 Cloudfoundry CF Deployment 7.9.0 Cloudfoundry CF Deployment 7.10.0 Cloudfoundry CF Deployment 7.11.0 Cloudfoundry CF Deployment 8.0.0 Cloudfoundry CF Deployment 8.1.0 Cloudfoundry CF Deployment 9.0.0 Cloudfoundry CF Deployment 9.1.0 Cloudfoundry CF Deployment 9.2.0 Cloudfoundry CF Deployment 9.3.0 Cloudfoundry CF Deployment 9.4.0 Cloudfoundry CF Deployment 9.5.0 Cloudfoundry CF Deployment 10.0.0 Cloudfoundry CF Deployment 10.1.0 Cloudfoundry CF Deployment 11.0.0 Cloudfoundry CF Deployment 11.1.0 Cloudfoundry CF Deployment 11.2.0 Cloudfoundry CF Deployment 12.0.0 Cloudfoundry CF Deployment 12.1.0 Cloudfoundry CF Deployment 12.2.0 Cloudfoundry CF Deployment 12.3.0 Cloudfoundry CF Deployment 12.4.0 Cloudfoundry CF Deployment 12.5.0 Cloudfoundry CF Deployment 12.6.0 Cloudfoundry CF Deployment 12.7.0 Cloudfoundry CF Deployment 12.8.0 Cloudfoundry CF Deployment 12.9.0 Cloudfoundry CF Deployment 12.10.0 Cloudfoundry CF Deployment 12.11.0 Cloudfoundry CF Deployment 12.12.0 Cloudfoundry CF Deployment 12.13.0 Cloudfoundry CF Deployment 12.14.0 Cloudfoundry CF Deployment 12.15.0 Cloudfoundry CF Deployment 12.16.0 Cloudfoundry CF Deployment 12.17.0 Cloudfoundry CF Deployment 12.18.0 Cloudfoundry CF Deployment 12.19.0 Cloudfoundry CF Deployment 12.20.0 Cloudfoundry CF Deployment 12.21.0 Cloudfoundry CF Deployment 12.22.0 Cloudfoundry CF Deployment 12.23.0 Cloudfoundry CF Deployment 12.24.0 Cloudfoundry CF Deployment 12.25.0 Cloudfoundry CF Deployment 12.26.0 Cloudfoundry CF Deployment 12.27.0 Cloudfoundry CF Deployment 12.28.0 Cloudfoundry CF Deployment 12.29.0 Cloudfoundry CF Deployment 12.30.0 Cloudfoundry CF Deployment 12.31.0 Cloudfoundry CF Deployment 12.32.0 Cloudfoundry CF Deployment 12.33.0 Cloudfoundry CF Deployment 12.34.0 Cloudfoundry CF Deployment 12.35.0 Cloudfoundry CF Deployment 12.36.0 Cloudfoundry CF Deployment 12.37.0 Cloudfoundry CF Deployment 12.38.0 Cloudfoundry CF Deployment 12.39.0 Cloudfoundry CF Deployment 12.40.0 Cloudfoundry CF Deployment 12.41.0 Cloudfoundry CF Deployment 12.42.0 Cloudfoundry CF Deployment 12.43.0 Cloudfoundry CF Deployment 12.44.0 Cloudfoundry CF Deployment 12.45.0 Cloudfoundry CF Deployment 13.0.0 Cloudfoundry CF Deployment 13.1.0 Cloudfoundry CF Deployment 13.2.0 Cloudfoundry CF Deployment 13.3.0 Cloudfoundry CF Deployment 13.4.0 Cloudfoundry CF Deployment 13.5.0 Cloudfoundry CF Deployment 13.6.0 Cloudfoundry CF Deployment 13.7.0 Cloudfoundry CF Deployment 13.8.0 Cloudfoundry CF Deployment 13.9.0 Cloudfoundry CF Deployment 13.10.0 Cloudfoundry CF Deployment 13.11.0 Cloudfoundry CF Deployment 13.12.0 Cloudfoundry CF Deployment 13.13.0 Cloudfoundry CF Deployment 13.14.0	213

Common Weakness Enumeration (CWE)

CWE-754 - Improper Check for Unusual or Exceptional Conditions

References

https://www.cloudfoundry.org/blog/cve-2020-5420