CVE-2018-1269
MEDIUMCloudfoundry Loggregator < 89.5 - Improper Exception Handling
Title source: ruleDescription
Cloud Foundry Loggregator, versions 89.x prior to 89.5 or 96.x prior to 96.1 or 99.x prior to 99.1 or 101.x prior to 101.9 or 102.x prior to 102.2, does not handle errors thrown while constructing certain http requests. A remote authenticated user may construct malicious requests to cause the traffic controller to leave dangling TCP connections, which could cause denial of service.
Scores
CVSS v3
6.5
EPSS
0.0067
EPSS Percentile
71.0%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Classification
CWE
CWE-755
Status
published
Affected Products (1)
cloudfoundry/loggregator
< 89.5
Timeline
Published
Jun 06, 2018
Tracked Since
Feb 18, 2026