CVE-2024-46943

OpenDaylight Authentication, Authorization and Accounting (AAA) versions through 0.19.3 are vulnerable to an improper authorization issue. The root cause is inadequate validation of cluster membership , which allows a rogue controller to join a cluster and impersonate an offline peer , even witho...