7.5
CVE-2017-1000406
- EPSS 1.09%
- Veröffentlicht 30.11.2017 21:29:00
- Zuletzt bearbeitet 13.05.2026 00:24:29
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginOpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared (e.g. via restart).
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Opendaylight ≫ Karaf Version0.6.1-carbon
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.09% | 0.611 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:P/A:N
|
http://seclists.org/oss-sec/2017/q4/320
https://git.opendaylight.org/gerrit/#/q/topic:AAA-151
https://jira.opendaylight.org/browse/AAA-151