1. Home
  2. CVE Database
  3. CVE-2019-3789
MEDIUM · 6.5

CVE-2019-3789

Cloud Foundry Routing Release, all versions prior to 0.188.0, contains a vulnerability that can hijack the traffic to route services hosted outside the platform. A user with space developer permission...

Vulnerability Description

Cloud Foundry Routing Release, all versions prior to 0.188.0, contains a vulnerability that can hijack the traffic to route services hosted outside the platform. A user with space developer permissions can create a private domain that shadows the external domain of the route service, and map that route to an app. When the gorouter receives traffic destined for the external route service, this traffic will instead be directed to the internal app using the shadow route.

CVSS Score

6.5

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
NONE
Integrity
HIGH
Availability
NONE

Affected Products

VendorProductVersions
CloudfoundryRouting Release< 0.188.0

Related Weaknesses (CWE)

CWE-840CWE-269

References

FAQ

What is CVE-2019-3789?

CVE-2019-3789 is a vulnerability with a CVSS score of 6.5 (MEDIUM). Cloud Foundry Routing Release, all versions prior to 0.188.0, contains a vulnerability that can hijack the traffic to route services hosted outside the platform. A user with space developer permission...

How severe is CVE-2019-3789?

CVE-2019-3789 has been rated MEDIUM with a CVSS base score of 6.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-3789?

Check the references section above for vendor advisories and patch information. Affected products include: Cloudfoundry Routing Release.