CVE-2017-7557

dnsdist version 1.1.0 is vulnerable to a flaw in authentication mechanism for REST API potentially allowing CSRF attack.

Score

CVSS 3.0 8.8 High

Status

Modified - secalert@redhat.com

Published

2017-08-22

Last modified

2024-09-16

Weaknesses

CWE-287, CWE-352

Affected products

• Dnsdist (Powerdns)
• Dnsdist (Red Hat Inc.)

References

• http://www.securityfocus.com/bid/100508
• https://dnsdist.org/security-advisories/powerdns-advisory-for-dnsdist-2017-02.html