Paper/Archive/CVE-2022-31733

CVE-2022-31733

vmware — Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, apps are accessible via anoth…

EPSS 0.4%CVSS 9.1

critical.is priorityof 100

CVSS 9.1 (NVD, ADP agree)9.1 / 10 × 3027.3 Not in CISA KEV+300.0 EPSS percentile 31.8.318 × 206.4 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Starting with diego-release 2.55.0 and up to 2.69.0, and starting with CF Deployment 17.1 and up to 23.2.0, apps are accessible via another port on diego cells, allowing application ingress without a client certificate. If mTLS route integrity is enabled AND unproxied ports are turned off, then an attacker could connect to an application that should be only reachable via mTLS, without presenting a client certificate.

Affected

ProductAffectedFixed inSource

Cloud Foundry Diego and CF DeploymentAffected versions of Diego are all versions between 2.55.0 and 2.69.0 (inclusive) and affected versions of CF Deployment are all versions between 17.1 and 23.2.0 (inclusive).–CNA

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

refcloudfoundry.org/blog/cve-2022-31733-unsecured-application-port