CVE-2015-1778

Critical

Published: 27/06/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The custom authentication realm used by karaf-tomcat's 'opendaylight' realm in Opendaylight before Helium SR3 will authenticate any username and password combination.

Risk Assessment

Organizations may be exposed to unauthorized access to systems, potentially leading to serious security breaches.

Recommendation

It is recommended to update Opendaylight to version Helium SR3 or later to mitigate this vulnerability.

Original NVD description (English source)

The custom authentication realm used by karaf-tomcat's "opendaylight" realm in Opendaylight before Helium SR3 will authenticate any username and password combination.