org.opendaylight.aaa vulnerabilities

Products

• org.opendaylight.aaa/aaa-artifacts 1

Latest org.opendaylight.aaa CVEs

Newest publication first

1. CVE-2024-46943 OpenDaylight Authentication, Authorization and Accounting (AAA) peer impersonation vulnerability

   Published 2024-09-15

   High·CVSS 7.5 EPSS 0.56%

   An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue controller does not possess the complete cluster configuration information.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.