CVE-2019-11189

Authentication Bypass by Spoofing in org.onosproject.acl access control and org.onosproject.mobility host mobility in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection. To exploit the vulnerability, an attacker sends a gratuitous ARP reply tha...

PT-2020-9168

Name of the Vulnerable Software and Affected Versions ONOS versions prior to 2.1 Description The issue allows attackers to bypass network access control via data plane packet injection, specifically by exploiting the authentication bypass by spoofing in the access control and host mobility...