org.opendaylight.faas:features4-faas (>=1.2.0-carbon, <=1.3.3), org.opendaylight.faas:odl-faas-all (>=1.2.0-carbon, <=1.3.3) +67 more potentially affected by CVE-2025-29315 via org.opendaylight.sfc:sfc-provider (>=0.0.1-helium, <=0.10.4)

org.opendaylight.sfc:sfc-provider MAVEN version =0.0.1-helium, =1.2.0-carbon, =1.2.0-carbon, =1.2.0-carbon, =1.0.0-beryllium, =0.6.0, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.5.0-carbon, =0.6.0, =0.9.0, =0.9.0, =0.11.4 and more Source cves: CVE-2025-29315 Source advisory:...

CVE-2025-29315

An issue in the Shiro-based RBAC Role-based Access Control mechanism of OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to execute privileged operations via a crafted request...

CVE-2025-29315

An issue in the Shiro-based RBAC Role-based Access Control mechanism of OpenDaylight Service Function Chaining SFC Subproject SFC Sodium-SR4 and below allows attackers to execute privileged operations via a crafted request...

CVE-2025-29315

The OpenDaylight Service Function Chaining (SFC) subproject, specifically the SFC Sodium-SR4 and below versions, is vulnerable to Improper Access Control . The root cause is a flaw in the Shiro-based RBAC (Role-based Access Control) mechanism , which allows attackers to execute privileged operati...