OpenDaylight Karaf Information Disclosure Vulnerability

OpenDaylight, a project of the Linux Foundation in the United States, is a set of community-driven open source software-defined networking frameworks that contain an ensemble of modules capable of performing networking tasks that need to be done quickly.Karaf is an OSGi-based runtime environment...

CVE-2017-1000406

OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared e.g. via restart...