Security Advisory

CVE-2018-1132

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-06-20 13:00:00

Last updated 2024-08-05 03:51:48

Assigner redhat

CVSS score 7.5

State PUBLISHED

Description

A flaw was found in Opendaylight's SDNInterfaceapp (SDNI). Attackers can SQL inject the component's database (SQLite) without authenticating to the controller or SDNInterfaceapp. SDNInterface has been deprecated in OpenDayLight since it was last used in the final Carbon series release. In addition to the component not being included in OpenDayLight in newer releases, the SDNInterface component is not packaged in the opendaylight package included in RHEL.

← Browse all CVEs View on cve.org ↗