High severity7.5NVD Advisory· Published Sep 15, 2024· Updated Jun 17, 2026
CVE-2024-46943
CVE-2024-46943
Description
An issue was discovered in OpenDaylight Authentication, Authorization and Accounting (AAA) through 0.19.3. A rogue controller can join a cluster to impersonate an offline peer, even if this rogue controller does not possess the complete cluster configuration information.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
org.opendaylight.aaa:aaa-artifactsMaven | <= 0.19.3 | — |
Affected products
3- cpe:2.3:a:opendaylight:authentication\,_authorization_and_accounting:*:*:*:*:*:*:*:*Range: <=0.19.3
Patches
Vulnerability mechanics
References
5- github.com/advisories/GHSA-46hr-3cq3-mcgpghsaADVISORY
- lf-opendaylight.atlassian.net/browse/AAA-285nvdIssue TrackingVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2024-46943ghsaADVISORY
- docs.opendaylight.org/en/latest/release-notes/projects/aaa.htmlnvdRelease NotesWEB
- doi.org/10.48550/arXiv.2408.16940nvdTechnical DescriptionWEB
News mentions
0No linked articles in our index yet.