The product performs reverse DNS resolution on an IP address to obtain the hostname and make a security decision, but it does not properly ensure that the IP address is truly associated with the hostname.
Use other means of identity verification that cannot be simply spoofed. Possibilities include a username/password or certificate.
Perform proper forward and reverse DNS lookups to detect DNS spoofing.
Our security experts can help you identify and remediate CWE-350 vulnerabilities in your codebase.
Get Security Assessment