Lucene search

RedhatCVELIST:CVE-2017-7557

HistoryAug 21, 2017 - 12:00 a.m.

CVE-2017-7557

2017-08-2100:00:00

CWE-287

redhat

www.cve.org

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.8%

JSON

dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.

CNA Affected

[
  {
    "product": "dnsdist",
    "vendor": "Red Hat, Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "1.1.0"
      }
    ]
  }
]

References

www.securityfocus.com/bid/100508

dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2017-02.html