Routing Release

DATE	CVE	VULNERABILITY TITLE	RISK
2017-07-17	CVE-2017-8034	Reliance on Cookies without Validation and Integrity Checking vulnerability in Cloudfoundry Capi-Release and Cf-Release The Cloud Controller and Router in Cloud Foundry (CAPI-release capi versions prior to v1.32.0, Routing-release versions prior to v0.159.0, CF-release versions prior to v267) do not validate the issuer on JSON Web Tokens (JWTs) from UAA. network high complexity cloudfoundry CWE-565	6.6
2017-06-13	CVE-2016-8218	Improper Input Validation vulnerability in Cloudfoundry Cf-Release An issue was discovered in Cloud Foundry Foundation routing-release versions prior to 0.142.0 and cf-release versions 203 to 231. network low complexity cloudfoundry CWE-20 critical	9.8