Improper Input Validation Affecting opendaylight package, versions *

Q: How to fix?

There is no fixed version for RHEL:7 opendaylight .

Threat Intelligence

Not Defined

1.02% (84^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Improper Input Validation vulnerabilities in an interactive lesson.

Start learning

Snyk IDSNYK-RHEL7-OPENDAYLIGHT-5048577
published27 Mar 2023
disclosed11 Jun 2019

Report a new vulnerability Found a mistake?

Introduced: 11 Jun 2019

CVE-2018-10899 (opens in a new tab) CWE-20 (opens in a new tab)

How to fix?

There is no fixed version for RHEL:7 opendaylight.

NVD Description

Note: Versions mentioned in the description apply only to the upstream opendaylight package and not the opendaylight package as distributed by RHEL. See How to fix? for RHEL:7 relevant fixed versions and status.

A flaw was found in Jolokia versions from 1.2 to before 1.6.1. Affected versions are vulnerable to a system-wide CSRF. This holds true for properly configured instances with strict checking for origin and referrer headers. This could result in a Remote Code Execution attack.