Skip to content
OpenAdvisories
Unscored CVE-2019-1010234 EUVD-2019-1976GHSA-m9gf-7fx2-qxm6

The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any…

Published Jul 22, 2019 · Updated Aug 5, 2024 · Assigned by dwf

Description

The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http request to the controller. The component is: Method runJavaCompiler in YangLiveCompilerManager.java. The attack vector is: network connectivity.

Affected products

VendorProductAffectedFixed
The Linux Foundation ONOS 1.15.0 and ealier —

References