← Database

CVE-2024-46943

HIGH CVSS: 7.5 Published: 2024-09-15 Modified: 2026-06-17

Description

An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue controller does not possess the complete cluster configuration information.

Affected Platforms

Opendaylight Authentication\, Authorization And Accounting

Weakness Type

NVD-CWE-noinfo, CWE-520

References