Lucene search
+L

10 matches found

RedhatCVE
RedhatCVE
•added 2025/05/23 10:34 a.m.•25 views

CVE-2024-46942

In OpenDaylight Model-Driven Service Abstraction Layer MD-SAL through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment...

9.1CVSS5.8AI score0.00443EPSS
SaveExploits0
Veracode
Veracode
•added 2024/09/17 5:21 a.m.•24 views

Improper Authorization

org.opendaylight.mdsal : mdsal-artifacts is vulnerable to Improper Authorization. The vulnerability is due to improper role enforcement, allowing a controller with a follower role to configure flow entries in an OpenDaylight clustering deployment...

9.1CVSS5.9AI score0.00443EPSS
SaveExploits0References4Affected Software1
osv_ghsa
osv_ghsa
•added 2024/09/16 2:37 p.m.•70 views

GHSA-HV38-H5PJ-C96J OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries

In OpenDaylight Model-Driven Service Abstraction Layer MD-SAL through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment...

7.1CVSS5.8AI score0.00443EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2024/09/16 2:37 p.m.•45 views

OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) allows follower controller to set up flow entries

In OpenDaylight Model-Driven Service Abstraction Layer MD-SAL through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment...

9.1CVSS5.8AI score0.00443EPSS
SaveExploits0References5Affected Software1
osv_cve
osv_cve
•added 2024/09/15 11:15 p.m.•22 views

CVE-2024-46942

In OpenDaylight Model-Driven Service Abstraction Layer MD-SAL through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment...

6.5CVSS5.8AI score0.00443EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2024/09/15 12:00 a.m.•41 views

OpenDaylight security vulnerabilities

OpenDaylight ODL is an open source SDN controller from OpenDaylight Open Source. A security vulnerability exists in OpenDaylight Model-Driven Service Abstraction Layer MD-SAL version 13.0.1 and earlier, which stems from the fact that controllers with the follower role can configure flow entries i...

9.1CVSS5.8AI score0.00443EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/15 12:00 a.m.•10 views

CVE-2024-46942: Improper Authorization

In OpenDaylight Model-Driven Service Abstraction Layer MD-SAL through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment...

9.1CVSS5.8AI score0.00443EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/09/15 12:00 a.m.•27 views

PT-2024-32291 · Opendaylight · Opendaylight Md-Sal

Name of the Vulnerable Software and Affected Versions: OpenDaylight Model-Driven Service Abstraction Layer MD-SAL versions through 13.0.1 Description: A controller with a follower role can configure flow entries in an OpenDaylight clustering deployment. Recommendations: For OpenDaylight...

9.1CVSS5.7AI score0.00443EPSS
SaveExploits0References14
CVE
CVE
•added 2024/09/15 12:00 a.m.•102 views

CVE-2024-46942

The OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) , specifically the mdsal-artifacts component in versions through 13.0.1 , is vulnerable to Improper Authorization (CWE-285). The root cause is improper role enforcement, which allows a controller with a follower role to unauthorized...

9.1CVSS5.8AI score0.00443EPSS
SaveExploits0References3Affected Software1
SUSE CVE
SUSE CVE
•added 2023/05/13 2:07 a.m.•18 views

SUSE CVE-2016-1407

Cisco IOS XR through 5.3.2 mishandles Local Packet Transport Services LPTS flow-base entries, which allows remote attackers to cause a denial of service session drop by making many connection attempts to open TCP ports, aka Bug ID CSCux95576...

7.5CVSS6.8AI score0.01765EPSS
SaveExploits0References3
Rows per page
Query Builder