What is CVE-2021-22100?

CVE-2021-22100 is a medium-severity vulnerability in Cloudfoundry Capi-Release, classified under Uncontrolled Resource Consumption. CVSS score: 5.3/10. Published 2022-03-25.

How severe is CVE-2021-22100?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Resource exhaustion in Cloudfoundry Capi-Release

CVE-2021-22100

In cloud foundry CAPI versions prior to 1.122, a denial-of-service attack in which a developer can push a service broker that (accidentally or maliciously) causes CC instances to timeout and fail is possible. An attacker can leverage this vulnerability to cause an inability for anyone to push or manage apps.

Vulnerability class: DoS (Denial of Service)

EPSS: 0.009 (57.8th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Cloudfoundry Capi-release
Cloudfoundry Cf-deployment
N/a Cloud Controller (Capi) By Foundry — versions CAPI versions prior to 1.122.0

Weakness classification (CWE)

CWE-400 — Uncontrolled Resource Consumption

References

security@vmware.com (x_refsource_MISC, Vendor Advisory)

Frequently asked questions

What is CVE-2021-22100?: CVE-2021-22100 is a medium-severity vulnerability in Cloudfoundry Capi-Release, classified under Uncontrolled Resource Consumption. CVSS score: 5.3/10. Published 2022-03-25.
How severe is CVE-2021-22100?: Medium severity. CVSS v3 base score is 5.3 out of 10.