Design/Logic Flaw

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination...

CVE-2015-1778

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination...

CVE-2015-1778

CVE-2015-1778 concerns OpenDaylight’s OpenDaylight Helium lineage. The vulnerability arises from the custom authentication realm used by karaf-tomcat’s opendaylight realm, which will authenticate any username/password combination in OpenDaylight installations prior to Helium SR3. The result is an...