CVSS 3.1
5.3 mediumCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:NCVE-2020-14196
Medium (5.3) in powerdns recursor. EPSS 1.7% chance of exploitation in the next 30 days.
In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced.
Severity
- EPSS
- 1.7% chance of exploitation in the next 30 days; higher than 77% of CVEs (scores of 2026-10-31)
- CWE
- CWE-863
- Published
- Modified
- Record from
- the NVD, synced
Affected
- powerdns:recursor
References
- http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00043.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00042.html
- http://lists.opensuse.org/opensuse-security-announce/2020-09/msg00044.html
- http://lists.opensuse.org/opensuse-security-announce/2020-10/msg00036.html
- https://doc.powerdns.com/recursor/security-advisories/powerdns-advisory-2020-04.html