CVE-2021-22100

CVE-2021-22100

Vendor N/A
Product Cloud Controller (CAPI) by cloud foundry
Weakness CWE-400
Published March 25, 2022
Last update August 3, 2024

CVSS base score

What the vulnerability does

01Description

In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that (accidentally or maliciously) causes CC instances to timeout and fail is possible. An attacker can leverage this vulnerability to cause an inability for anyone to push or manage apps.

Key dates

02Disclosure timeline

March 25, 2022 CVE published
August 3, 2024 Record updated