CVE-2024-46943

2024-09-1500:00:00

mitre

github.com

opendaylight

aaa

security

vulnerability

AI Score

6.8

Confidence

Low

SSVC

Exploitation

none

Automatable

yes

Technical Impact

total

JSON

An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue controller does not possess the complete cluster configuration information.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:opendaylight:aaa:*:*:*:*:*:*:*:*"
    ],
    "vendor": "opendaylight",
    "product": "aaa",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "versionType": "custom",
        "lessThanOrEqual": "0.19.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]