Beveiligingsadvies

CVE-2019-25031

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-04-27 05:18:17
Laatst bijgewerkt 2024-08-05 03:00:18
Toegewezen door mitre
CVSS-score geen score
Status PUBLISHED

Beschrijving

Unbound before 1.9.5 allows configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack against a cleartext HTTP session. NOTE: The vendor does not consider this a vulnerability of the Unbound software. create_unbound_ad_servers.sh is a contributed script from the community that facilitates automatic configuration creation. It is not part of the Unbound installation