CVE-2021-32919

An issue was discovered in Prosody before 0.11.9

published May 13, 2021

CVSS
—
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

An issue was discovered in Prosody before 0.11.9. The undocumented dialback_without_dialback option in mod_dialback enables an experimental feature for server-to-server authentication. It does not correctly authenticate remote server certificates, allowing a remote server to impersonate another server (when this option is enabled).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01392 · 72.1th percentile
Published
2021-05-13T15:12Z
EPSS history
Timeline
  • 13 MAY 15:12Z
    An issue was discovered in Prosody before 0.11.9
    cvelistv5