PT-2017-10787 · Linux Foundation · Onos

Johann Vierthaler + 2 · Publicado 2017-07-13 · Atualizado 2020-12-07 · CVE-2017-1000080

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Linux foundation ONOS version 1.9.0

Description The issue allows unauthenticated use of websockets.

Recommendations For Linux foundation ONOS version 1.9.0, consider disabling the use of websockets until a patch is available.

Correção

Identificadores relacionados

CVE-2017-1000080

Produtos afetados

Onos

Referências · 4

• https://wiki.onosproject.org/display/ONOS/Security+advisories · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-1000080 · Aviso do Fabricante
• https://t.me/cvenotify/6689 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000080 · Nota de Segurança