CVE-2017-1000406

State: Published
Severity: Not scored
Published: Nov 30, 2017
Updated: Sep 16, 2024
Reserved: Nov 30, 2017

Description

OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared (e.g. via restart).

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

https://git.opendaylight.org/gerrit/#/q/topic:AAA-151
https://jira.opendaylight.org/browse/AAA-151
[oss-security] 20171123 OpenDayLight: Password change doesn't result in Karaf clearing cache, allowing old password to still be used (CVE-2017-1000406)mailing-list

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.