CVE-2017-7557

Опубликовано: 22 авг. 2017

Источник: nvd

CVSS3: 8.8

CVSS2: 6.8

EPSS Низкий

Описание

dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.

Ссылки

http://www.securityfocus.com/bid/100508
Third Party Advisory
VDB Entry
https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2017-02.html
Patch
Vendor Advisory
http://www.securityfocus.com/bid/100508
Third Party Advisory
VDB Entry
https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2017-02.html
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:powerdns:dnsdist:1.1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 0%

0.00003

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-287

CWE-352

Связанные уязвимости

CVE-2017-7557

CVSS3: 8.8

ubuntu

больше 8 лет назад

dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.

CVE-2017-7557

CVSS3: 8.8

debian

больше 8 лет назад

dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechan ...

GHSA-337m-69vh-g93q

CVSS3: 8.8

github

больше 3 лет назад

dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.

SUSE-SU-2023:2777-1

suse-cvrf

больше 2 лет назад

Security update for dnsdist

SUSE-SU-2023:2760-2

suse-cvrf

около 2 лет назад

Security update for dnsdist

EPSS

Процентиль: 0%

0.00003

Низкий

8.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-287

CWE-352