PT-2017-10959 · Linux Foundation · Opendaylight Karaf

Publicado 2017-11-30 · Atualizado 2022-05-17 · CVE-2017-1000406

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenDaylight Karaf version 0.6.1-Carbon

Description The issue arises from the failure to clear the cache after a password change, allowing the old password to be used until the cache is manually cleared, for example, by restarting the system.

Recommendations For OpenDaylight Karaf version 0.6.1-Carbon, manually clear the Karaf cache, such as by restarting the system, after a password change to prevent the old password from being used.

Correção

Enumeração de Fraquezas

CWE-254

Identificadores relacionados

CVE-2017-1000406

GHSA-4PX2-GQHV-MRC7

Produtos afetados

Opendaylight Karaf

Referências · 7

• https://git.opendaylight.org/gerrit · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000406 · Nota de Segurança
• https://git.opendaylight.org/gerrit/#/q/topic:AAA-151 · Aviso do Fabricante
• https://jira.opendaylight.org/browse/AAA-151 · Aviso do Fabricante
• https://osv.dev/vulnerability/GHSA-4px2-gqhv-mrc7 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-1000406 · Aviso do Fabricante
• http://seclists.org/oss-sec/2017/q4/320 · Nota