CVE-2019-15137

The CVE-2019-15137 vulnerability affects the Access Control plugin in eProsima Fast RTPS (through version 1.9.0). The root cause is that fnmatch pattern matching is applied to topic name strings instead of the permission expressions themselves, enabling unintended connections between participants...

CVE-2019-15136

CVE-2019-15136 affects the Access Control plugin in eProsima Fast RTPS up to version 1.9.0. The vulnerability arises because remote connections to a participant do not have their partition permissions checked, allowing a policy bypass of a secure DDS partition. The issue is documented across mult...