Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2022-45932

Опубликовано: 27 нояб. 2022
Источник: nvd
CVSS3: 7.5
EPSS Низкий

Описание

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected when the API interface /auth/v1/roles/ is used.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:linuxfoundation:opendaylight:0.15.0:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:opendaylight:0.15.6:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:opendaylight:0.16.0:*:*:*:*:*:*:*
cpe:2.3:a:linuxfoundation:opendaylight:0.16.4:*:*:*:*:*:*:*

EPSS

Процентиль: 40%
0.0018
Низкий

7.5 High

CVSS3

Дефекты

CWE-89
CWE-89

Связанные уязвимости

redhat логотип

CVE-2022-45932

CVSS3: 6.8
redhat
около 3 лет назад

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected when the API interface /auth/v1/roles/ is used.

github логотип

GHSA-xvhw-73xq-6w53

CVSS3: 7.5
github
около 3 лет назад

A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/RoleStore.java deleteRole function is affected when the API interface /auth/v1/roles/ is used.

EPSS

Процентиль: 40%
0.0018
Низкий

7.5 High

CVSS3

Дефекты

CWE-89
CWE-89