Описание
An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue controller does not possess the complete cluster configuration information.
Ссылки
- Release Notes
- Technical Description
- Issue TrackingVendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 0.19.3 (включая)
cpe:2.3:a:opendaylight:authentication\,_authorization_and_accounting:*:*:*:*:*:*:*:*
EPSS
Процентиль: 50%
0.00268
Низкий
7.5 High
CVSS3
9.1 Critical
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-520
Связанные уязвимости
CVSS3: 4.3
github
больше 1 года назад
OpenDaylight Authentication, Authorization and Accounting (AAA) peer impersonation vulnerability
EPSS
Процентиль: 50%
0.00268
Низкий
7.5 High
CVSS3
9.1 Critical
CVSS3
Дефекты
NVD-CWE-noinfo
CWE-520