CVE-2014-8149 OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files.
HighCVSS 8.8
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| opendaylight defense4all | <= 1.1.0 | No fix listed |
References
- [oss-security] 20150122 Defense4all security advisory: CVE-2014-8149 users can export report data to an arbitrary file on the server's filesystem mailing-list vdb-entry
- 72280 third-party-advisory vdb-entry
- git.opendaylight.org patch vendor-advisory
- wiki.opendaylight.org vendor-advisory