Lucene search

K
cvelistMitreCVELIST:CVE-2019-25031
HistoryApr 27, 2021 - 5:18 a.m.

CVE-2019-25031

2021-04-2705:18:17
mitre
www.cve.org
3

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

42.8%

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation

AI Score

7.5

Confidence

High

EPSS

0.001

Percentile

42.8%