Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cloud Controller versions prior to 1.118.0 are vulnerable to unauthenticated denial of Service(DoS) vulnerability allowing unauthenticated attackers to cause denial of service by using REST HTTP requests with label_selectors on multiple V3 endpoints by generating an enormous SQL query.
CVSS Information
N/A
Vulnerability Type
未加控制的资源消耗(资源穷尽)
Vulnerability Title
Cloud Foundry Cloud Controller 资源管理错误漏洞
Vulnerability Description
Cloud Foundry Cloud Controller是Cloud Foundry基金会的一个用于在Cloud Foundry架构中负责与用户交互的组件。该组件负责管理app的整个生命周期，用户可通过命令行与Cloud Server 交互。 Cloud Foundry Cloud Controller 中存在资源管理错误漏洞，该漏洞源于产品未对用户的访问频率以及访问身份做有效限制。攻击者可通过发起多个v3端点上的http请求导致慢sql查询进而导致拒绝服务。 以下产品及版本受到影响：Cloud Co
CVSS Information
N/A
Vulnerability Type
N/A