What’s Vulnerable › Vulnerabilities

CVE-2015-1857

• Severity: medium (CVSS 5.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2018-04-27 · updated 2026-06-17
• Weakness: CWE-200

Description

The odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive information by leveraging missing AAA restrictions.

Affected products

• Linuxfoundation Opendaylight: before 0.2.4 — fixed in 0.2.4

How to fix

Upgrade to a fixed version: Linuxfoundation Opendaylight 0.2.4. Check the vendor advisory for mitigations.

References

• https://cloudrouter.org/security/
• https://git.opendaylight.org/gerrit/#/c/17709/
• https://wiki.opendaylight.org/view/Security_Advisories
• https://cloudrouter.org/security/
• https://git.opendaylight.org/gerrit/#/c/17709/
• https://wiki.opendaylight.org/view/Security_Advisories

Get alerted when CVE-2015-1857 or the next vulnerability affects your stack