Unauthenticated Attackers Can Degrade Cloud Foundry Deployment Availability

CVE-2024-22279

What is CVE-2024-22279?

The vulnerability in Cloud Foundry's Routing Release is attributed to improper handling of requests that permits unauthorized attackers to potentially degrade the availability of the Cloud Foundry service. This flaw affects versions from v0.273.0 to v0.297.0, where an attacker could execute denial-of-service attacks on the deployment if the attack is conducted at scale. Organizations utilizing these versions should apply mitigations to protect against service disruptions.

References