CVE-2019-15137

The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings instead of the permission expressions themselves, which can lead to unintended connections between participants in a Data Distribution Service DDS network...

CVE-2019-15137

The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings instead of the permission expressions themselves, which can lead to unintended connections between participants in a Data Distribution Service DDS network...

CVE-2019-15135

The CVE-2019-15135 issue is in the handshake protocol of OMG DDS Security 1.1, which transmits cleartext information about a participant’s capabilities (including session-inapplicable ones). This leakage enables an attacker to discover potentially sensitive reachability information on a DDS netwo...

CVE-2019-15135

The handshake protocol in Object Management Group OMG DDS Security 1.1 sends cleartext information about all of the capabilities of a participant including capabilities inapplicable to the current session, which makes it easier for attackers to discover potentially sensitive reachability...

PT-2019-14008

Name of the Vulnerable Software and Affected Versions eProsima Fast RTPS versions prior to 1.9.1 Description The issue concerns the Access Control plugin in eProsima Fast RTPS, where fnmatch pattern matches are performed with topic name strings instead of permission expressions. This can result i...

CVE-2019-15135: Cleartext Transmission of Sensitive Information

The handshake protocol in Object Management Group OMG DDS Security 1.1 sends cleartext information about all of the capabilities of a participant including capabilities inapplicable to the current session, which makes it easier for attackers to discover potentially sensitive reachability...

PT-2019-14006

Name of the Vulnerable Software and Affected Versions OMG DDS Security version 1.1 Description The handshake protocol in OMG DDS Security sends cleartext information about all participant capabilities, making it easier for attackers to discover potentially sensitive reachability information on a...