← Back

CVE-2024-46942

nvd nist
Published: Sep 15, 2024Modified: Mar 14, 2025

JSON object

Loading...
6.5
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Exploitability: 2.8 / Impact: 3.6
Source: NVD

Description

In OpenDaylight Model-Driven Service Abstraction Layer (MD-SAL) through 13.0.1, a controller with a follower role can configure flow entries in an OpenDaylight clustering deployment.

Affected (1)

Opendaylight
1 product
Model Driven Service Abstraction Layer
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Model Driven Service Abstraction Layer
Up to 13.0.1

Related CWEs

CWE-285
Improper Authorization
The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.

References (3)

Source: cve@mitre.org
Release Notes
Source: cve@mitre.org
Technical Description
Source: cve@mitre.org
Issue TrackingVendor Advisory

Timeline

No history available yet.