CVE-2015-10011

Summary

A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improper output neutralization for logs. The identifier of the patch is 9eba6ba5abd89d0e36a008921eb307fcef8c5311. It is recommended to apply a patch to fix this issue. The identifier VDB-217197 was assigned to this vulnerability.

Affected Software

Weaknesses

• CWE-117: CWE-117 Improper Output Neutralization for Logs

ADP Enrichment

CVE Program Container

Additional References

• https://vuldb.com/?id.217197
• https://vuldb.com/?ctiid.217197
• https://github.com/opendns/OpenResolve/commit/9eba6ba5abd89d0e36a008921eb307fcef8c5311

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://vuldb.com/?id.217197
• https://vuldb.com/?ctiid.217197
• https://github.com/opendns/OpenResolve/commit/9eba6ba5abd89d0e36a008921eb307fcef8c5311

• ←Previous
• Next→