Insecure Shiro cookie configurations in OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4 and below allow attackers to access sensitive information via a man-in-the-middle attack.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| org.opendaylight.sfc:odl-sfc-ovs(Maven) | 0 | N/A | N/A |
| org.opendaylight.sfc:odl-sfc-openflow-renderer(Maven) | 0 | N/A | N/A |
CVSS Metrics