Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv3

CVE-2017-1000406

Published: 30/11/2017 Updated: 20/12/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Subscribe to Karaf

Vulnerability Summary

OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared (e.g. via restart).

Vulnerable Product Search on Vulmon Subscribe to Product

opendaylight karaf 0.6.1-carbon

Vendor Advisories

Red Hat: CVE-2017-1000406
OpenDaylight Karaf 061-Carbon fails to clear the cache after a password change allowing the old password to be used until the Karaf cache is manually cleared (eg via restart) ...

References

CWE-254https://jira.opendaylight.org/browse/AAA-151https://git.opendaylight.org/gerrit/#/q/topic:AAA-151http://seclists.org/oss-sec/2017/q4/320https://nvd.nist.govhttps://access.redhat.com/security/cve/cve-2017-1000406
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook