CVE-2019-1010234

9.8CRITICAL

Key Information:

Vendor
Linux
Status
Onos
Vendor
CVE Published:
22 July 2019

Summary

The Linux Foundation ONOS 1.15.0 and ealier is affected by: Improper Input Validation. The impact is: The attacker can remotely execute any commands by sending malicious http request to the controller. The component is: Method runJavaCompiler in YangLiveCompilerManager.java. The attack vector is: network connectivity.

Affected Version(s)

ONOS 1.15.0 and ealier

References

https://drive.google.com/file/d/1OkMtrMgjjINsDUQwxpGxjbAT...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.