| Package | Affected versions | Patched versions |
|---|---|---|
| org.opendaylight.aaa:aaa-artifacts | ≤ 0.19.3 | |
| authentication, authorization and accounting | ≤ 0.19.3 |
An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue controller does not possess the complete cluster configuration information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free