critical9.8
CVE-2015-1778
The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combi…
Impact
The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Opendaylight | Opendaylight | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2015/03/20/3
- http://www.securityfocus.com/bid/73255
- https://cloudrouter.org/security/
- https://wiki.opendaylight.org/view/Security_Advisories
- http://www.openwall.com/lists/oss-security/2015/03/20/3
- http://www.securityfocus.com/bid/73255
- https://cloudrouter.org/security/
- https://wiki.opendaylight.org/view/Security_Advisories