Design/Logic Flaw

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination...

CVE-2015-1778

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination...

CVE-2015-1778

CVE-2015-1778 concerns OpenDaylight’s OpenDaylight Helium lineage. The vulnerability arises from the custom authentication realm used by karaf-tomcat’s opendaylight realm, which will authenticate any username/password combination in OpenDaylight installations prior to Helium SR3. The result is an...

PT-2017-6516

Name of the Vulnerable Software and Affected Versions Opendaylight versions prior to Helium SR3 Description The issue concerns the custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight. This realm will authenticate any username and password combination, indicatin...

CVE-2015-1778: Improper Authentication

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination...