En bref
- CVE-2024-46943 est une vulnérabilité ÉLEVÉE (CVSS 7.5) touchant org.opendaylight.aaa:aaa-artifacts, authentication, authorization and accounting (opendaylight).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.56%, plus élevée que 46.5% des vulnérabilités.
- Aucune version corrigée n'est encore connue : suivez l'avis de l'éditeur dans les références.
Description
An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue controller does not possess the complete cluster configuration information.
NVD description
An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue controller does not possess the complete cluster configuration information.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free