CVE-2018-1132

A flaw was found in Opendaylight's SDNInterfaceapp SDNI. Attackers can SQL inject the component's database SQLite without authenticating to the controller or SDNInterfaceapp. SDNInterface has been deprecated in OpenDayLight since it was last used in the final Carbon series release. In addition to...

CVE-2018-1132

OpenDaylight CVE-2018-1132 affects the SDNInterfaceapp (SDNI) component. The flaw allows unauthenticated attackers to SQL-inject the SDNI SQLite database via the SDNInterface code path that builds insert queries, specifically in the SDNI database handling. The vulnerability arises from portName c...

CVE-2018-1132

A flaw was found in Opendaylight's SDNInterfaceapp SDNI. Attackers can SQL inject the component's database SQLite without authenticating to the controller or SDNInterfaceapp...