The vulnerability of the createFlow() and createFlows() functions (FlowWebResource.java) of the RESTful operating system-based service of Open Network Operating System allows a hacker to arbitrarily modify the settings of the switch.

The vulnerability of the createFlow and createFlows functions FlowWebResource.java of the RESTful operating system service of Open Network Operating System is caused by a numerical overflow. Exploiting this vulnerability could allow an attacker to arbitrarily modify the settings of the switch...

CVE-2019-1010250

The Linux Foundation ONOS 2.0.0 and earlier is affected by: Poor Input-validation. The impact is: A network administrator or attacker can install unintended flow rules in the switch by mistake. The component is: createFlow and createFlows functions in FlowWebResource.java RESTful service. The...