Lucene search

GitHub Advisory DatabaseGHSA-HV38-H5PJ-C96J

HistorySep 16, 2024 - 2:37 p.m.

OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries

2024-09-1614:37:28

CWE-285

GitHub Advisory Database

github.com

opendaylight

md-sal

follower controller

configure flow entries

clustering deployment

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.8

Confidence

High

JSON

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment.

Affected configurations

Vulners

Node

org.opendaylight.mdsal\mdsalMatchartifacts

VendorProductVersionCPE
org.opendaylight.mdsal\mdsalartifactscpe:2.3:a:org.opendaylight.mdsal\:mdsal:artifacts:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
org.opendaylight.mdsal\	mdsal	artifacts	cpe:2.3:a:org.opendaylight.mdsal\:mdsal:artifacts::::::::

References

docs.opendaylight.org/en/latest/release-notes/projects/mdsal.html

doi.org/10.48550/arXiv.2408.16940

github.com/advisories/GHSA-hv38-h5pj-c96j

lf-opendaylight.atlassian.net/browse/MDSAL-869

nvd.nist.gov/vuln/detail/CVE-2024-46942

CVSS3

9.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

AI Score

6.8

Confidence

High

JSON

Related for GHSA-HV38-H5PJ-C96J