CVE-2019-11189

Authentication Bypass by Spoofing in org.onosproject.acl access control and org.onosproject.mobility host mobility in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection. To exploit the vulnerability, an attacker sends a gratuitous ARP reply tha...

CVE-2019-11189: Authentication Bypass by Spoofing

Authentication Bypass by Spoofing in org.onosproject.acl access control and org.onosproject.mobility host mobility in ONOS v2.0 and earlier allows attackers to bypass network access control via data plane packet injection. To exploit the vulnerability, an attacker sends a gratuitous ARP reply tha...

PT-2020-9812

Name of the Vulnerable Software and Affected Versions Open Network Operating System ONOS version 1.14 Description An issue was discovered in the mobility application org.onosproject.mobility where the host event listener does not handle the event types: HOST ADDED, HOST REMOVED, HOST UPDATED. Thi...