Vulnerabilities > CVE-2014-5035 - Unspecified vulnerability in Opendaylight 1.0

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
opendaylight
NVD
Published: 2014-08-26
Updated: 2024-11-21

Summary

The Netconf (TCP) service in OpenDaylight 1.0 allows remote attackers to read arbitrary files via an XML external entity declaration in conjunction with an entity reference in an XML-RPC message, related to an XML External Entity (XXE) issue.

Vulnerable Configurations

Part Description Count
Application
Opendaylight
1

References