Launchpad.net

CVE 2020-14196

In PowerDNS Recursor versions up to and including 4.3.1, 4.2.2 and 4.1.16, the ACL restricting access to the internal web server is not properly enforced.

See the CVE page on Mitre.org for more details.