Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-9vvw-9wr3-56v3

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью
CVSS3: 5.9

Описание

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session.

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session.

EPSS

Процентиль: 74%
0.00811
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-74

Связанные уязвимости

CVSS3: 5.9
ubuntu
почти 5 лет назад

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation

CVSS3: 5.9
redhat
около 6 лет назад

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation

CVSS3: 5.9
nvd
почти 5 лет назад

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation

CVSS3: 5.9
debian
почти 5 лет назад

Unbound before 1.9.5 allows configuration injection in create_unbound_ ...

CVSS3: 5.9
fstec
больше 6 лет назад

Уязвимость компонента create_unbound_ad_servers.sh DNS-сервера Unbound, позволяющая нарушителю оказать воздействие на целостность данных

EPSS

Процентиль: 74%
0.00811
Низкий

5.9 Medium

CVSS3

Дефекты

CWE-74