What’s Vulnerable › Vulnerabilities

CVE-2014-8149

• Severity: high (CVSS 8.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2017-06-27 · updated 2026-06-17
• Weakness: CWE-20

Description

OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files.

Affected products

• OpenDayLight Defense4All: through 1.1.0

References

• http://www.openwall.com/lists/oss-security/2015/01/22/1
• http://www.securityfocus.com/bid/72280
• https://git.opendaylight.org/gerrit/#/c/13972/
• https://git.opendaylight.org/gerrit/#/c/14088/
• https://wiki.opendaylight.org/view/Security_Advisories
• http://www.openwall.com/lists/oss-security/2015/01/22/1
• http://www.securityfocus.com/bid/72280
• https://git.opendaylight.org/gerrit/#/c/13972/
• https://git.opendaylight.org/gerrit/#/c/14088/
• https://wiki.opendaylight.org/view/Security_Advisories

Get alerted when CVE-2014-8149 or the next vulnerability affects your stack