Vulnerabilities > CVE-2017-1000080 - Unspecified vulnerability in Onosproject Onos 1.8.0/1.9.0

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

HIGH

Availability impact

NONE

network

low complexity

NVD

Published: 2017-07-17

Updated: 2020-12-07

Summary

Linux foundation ONOS 1.9.0 allows unauthenticated use of websockets.

Vulnerable Configurations

Part	Description	Count
Application	Onosproject Onosproject Onos 1.8.0 Onosproject Onos 1.9.0	2

References

https://wiki.onosproject.org/display/ONOS/Security+advisories

CVE is a registered MITRE Corporation trademark and MITRE's CVE website is the authoritative source of CVE content. CWE is a registered MITRE Corporation trademark and MITRE's CWE website is the authoritative source of CWE content.