CVE-2019-15137

The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings instead of the permission expressions themselves, which can lead to unintended connections between participants in a Data Distribution Service DDS network...

CVE-2019-15137

The CVE-2019-15137 vulnerability affects the Access Control plugin in eProsima Fast RTPS (through version 1.9.0). The root cause is that fnmatch pattern matching is applied to topic name strings instead of the permission expressions themselves, enabling unintended connections between participants...

CVE-2019-15136

The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service DDS partition...

CVE-2019-15136

The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service DDS partition...

CVE-2019-15136

CVE-2019-15136 affects the Access Control plugin in eProsima Fast RTPS up to version 1.9.0. The vulnerability arises because remote connections to a participant do not have their partition permissions checked, allowing a policy bypass of a secure DDS partition. The issue is documented across mult...

PT-2019-14008

Name of the Vulnerable Software and Affected Versions eProsima Fast RTPS versions prior to 1.9.1 Description The issue concerns the Access Control plugin in eProsima Fast RTPS, where fnmatch pattern matches are performed with topic name strings instead of permission expressions. This can result i...

PT-2019-14007

Name of the Vulnerable Software and Affected Versions eProsima Fast RTPS versions prior to 1.9.1 Description The issue concerns the Access Control plugin in eProsima Fast RTPS, which fails to check partition permissions from remote participant connections. This can result in a policy bypass for a...

CVE-2019-15137: Undefined Security Weakness

The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings instead of the permission expressions themselves, which can lead to unintended connections between participants in a Data Distribution Service DDS network...

CVE-2019-15136: Missing Authorization

The Access Control plugin in eProsima Fast RTPS through 1.9.0 does not check partition permissions from remote participant connections, which can lead to policy bypass for a secure Data Distribution Service DDS partition...