CVE-2017-15093

{"id": "CVE-2017-15093", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 3.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:S/C:N/I:P/A:N", "authentication": "SINGLE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "LOW", "obtainAllPrivilege": false, "exploitabilityScore": 6.8, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 5.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.6}]}, "published": "2018-01-23T15:29:00.383", "references": [{"url": "http://www.securityfocus.com/bid/101982", "tags": ["Third Party Advisory", "VDB Entry"], "source": "secalert@redhat.com"}, {"url": "https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2017-06.html", "tags": ["Mitigation", "Patch", "Vendor Advisory"], "source": "secalert@redhat.com"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}, {"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "When api-config-dir is set to a non-empty value, which is not the case by default, the API in PowerDNS Recursor 4.x up to and including 4.0.6 and 3.x up to and including 3.7.4 allows an authorized user to update the Recursor's ACL by adding and removing netmasks, and to configure forward zones. It was discovered that the new netmask and IP addresses of forwarded zones were not sufficiently validated, allowing an authenticated user to inject new configuration directives into the Recursor's configuration."}, {"lang": "es", "value": "Cuando a api-config-dir se le asigna un valor no vac\u00edo, lo que no ocurre por defecto, la API en PowerDNS Recursor 4.x hasta e incluyendo la versi\u00f3n 4.0.6 y en versiones 3.x hasta la 3.7.4, tambi\u00e9n incluida, permite que un usuario autorizado actualice la lista de control de acceso de Recursor a\u00f1adiendo y eliminando m\u00e1scaras de red y configure zonas de redirecci\u00f3n. Se ha descubierto que las nuevas m\u00e1scaras de red y las direcciones IP de las zonas redireccionadas no se validaban lo suficiente, lo que permite que un usuario autenticado inyecte nuevas directivas de configuraci\u00f3n en la configuraci\u00f3n de Recursor."}], "lastModified": "2019-10-09T23:24:12.217", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "26A2DE9E-6667-41DF-9BFA-CC0688094368", "versionEndIncluding": "3.7.4", "versionStartIncluding": "3.0"}, {"criteria": "cpe:2.3:a:powerdns:recursor:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94094CC8-C228-40FF-BA81-FD93082D99A2", "versionEndIncluding": "4.0.6", "versionStartIncluding": "4.0.0"}], "operator": "OR"}]}], "sourceIdentifier": "secalert@redhat.com"}