Description
OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files.
References
- 72280 vdb-entry
- https://git.opendaylight.org/gerrit/#/c/14088/
- https://git.opendaylight.org/gerrit/#/c/13972/
- https://wiki.opendaylight.org/view/Security_Advisories
- [oss-security] 20150122 Defense4all security advisory: CVE-2014-8149 users can export report data to an arbitrary file on the server's filesystem mailing-list