CVE-2021-22100
Last modified
CVE-2021-22100 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that (accidentally or maliciously) causes CC instances to timeout and fail is possible. An attacker can leverage this vulnerability to cause an inability for anyone to push or manage apps.. EPSS estimates a 0.88% chance of exploitation in the next 30 days.
Description
In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that (accidentally or maliciously) causes CC instances to timeout and fail is possible. An attacker can leverage this vulnerability to cause an inability for anyone to push or manage apps.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Cloudfoundry | Capi-Release | < 1.122.0 |
| Cloudfoundry | Cf-Deployment | < 17.1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2021-22100?
How severe is CVE-2021-22100?
How do I fix CVE-2021-22100?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-2209Vulnerability in the Oracle Email Center product of Oracle E…8.5
- CVE-2021-22095In Spring AMQP versions 2.2.0 - 2.2.19 and 2.3.0 - 2.3.11, t…6.5
- CVE-2021-22096In Spring Framework versions 5.3.0 - 5.3.10, 5.2.0 - 5.2.17,…4.3
- CVE-2021-22097In Spring AMQP versions 2.2.0 - 2.2.18 and 2.3.0 - 2.3.10, t…6.5
- CVE-2021-22098UAA server versions prior to 75.4.0 are vulnerable to an ope…6.1
- CVE-2021-2210Vulnerability in the Oracle Trade Management product of Orac…8.2
- CVE-2021-22101Cloud Controller versions prior to 1.118.0 are vulnerable to…7.5
- CVE-2021-2211Vulnerability in the Oracle WebLogic Server product of Oracl…5.9
- CVE-2021-22112Spring Security 5.4.x prior to 5.4.4, 5.3.x prior to 5.3.8.R…8.8
- CVE-2021-22113Applications using the “Sensitive Headers” functionality in …5.3
- CVE-2021-22114Addresses partial fix in CVE-2018-1263. Spring-integration-z…5.3
- CVE-2021-22115Cloud Controller API versions prior to 1.106.0 logs service …6.5
Are you affected by CVE-2021-22100?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST