~/products/cloud_foundry/haproxy-boshrelease

pipeline liveDigest Docs

Cloud Foundry Haproxy-Boshrelease vulnerabilities

1 known vulnerability affecting cloud_foundry/haproxy-boshrelease.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

CRITICAL1

Vulnerabilities

SortPage 1 of 1

CVE-2024-37082P2CRITICALCVSS 9.1fixed in 0.299.02024-07-03

CVE-2024-37082 [CRITICAL] CWE-290 CVE-2024-37082: When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configura When deploying Cloud Foundry together with the haproxy-boshrelease and using a non default configuration, it might be possible to craft HTTP requests that bypass mTLS authentication to Cloud Foundry applications. You are affected if you have route-services enabled in routing-release and have configured the haproxy-boshrelease property “ha_proxy.f

Cloud Foundry Haproxy-Boshrelease vulnerabilities | cvebase