# Cloudflare DDoS protections ironically bypassed using Cloudflare

**URL:** <https://community.passbolt.com/t/cloudflare-ddos-protections-ironically-bypassed-using-cloudflare/8561>\
**Category:** In the news\
**Created:** [October 1, 2023, 8:08pm UTC](https://community.passbolt.com/t/cloudflare-ddos-protections-ironically-bypassed-using-cloudflare/8561 "2023-10-01T20:08:06Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Duffman](https://yyz1.discourse-cdn.com/flex031/user_avatar/community.passbolt.com/duffman/32/3667_2.png) [@Duffman](https://community.passbolt.com/u/Duffman)\
**Post date:** [October 1, 2023, 8:08pm UTC](https://community.passbolt.com/t/cloudflare-ddos-protections-ironically-bypassed-using-cloudflare/8561/1 "2023-10-01T20:08:06Z")

</div>

Cloudflare’s Firewall and DDoS prevention can be bypassed through a specific attack process that leverages logic flaws in cross-tenant security controls.

This bypass could put Cloudflare’s customers under a heavy burden, rendering the protection systems of the internet firm less effective.

To make matters worse, the only requirement for the attack is for the hackers to create a free Cloudflare account, which is used as part of the attack.

> **[Cloudflare DDoS protections ironically bypassed using Cloudflare](https://www.bleepingcomputer.com/news/security/cloudflare-ddos-protections-ironically-bypassed-using-cloudflare/)**
>
> Cloudflare's Firewall and DDoS prevention can be bypassed through a specific attack process that leverages logic flaws in cross-tenant security controls.