Lucene search
Veracode Vulnerability DatabaseVERACODE:38272HistoryNov 28, 2022 - 6:39 a.m.
SQL Injection
2022-11-2806:39:58
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
opendaylight
aaa
sql injection
rolestore.java
auth api
0.001 Low
EPSS
Percentile
30.5%
org.opendaylight.aaa:aaa-idm-store-h2 is vulnerable to SQL Injection attacks. A specifically crafted attack statement through the deleteRole function in RoleStore.java allows a malicious user to inject and execute arbitrary SQL queries on the target system, when the API interface /auth/v1/roles/ is used.
| CPE | Name | Operator | Version |
|---|---|---|---|
| aaa-idm-store-h2 | le | 0.16.4 | |
| aaa-idm-store-h2 | le | 0.16.4 |
Related
cvelist
cvelist
CVE-2022-45932
2022-11-27 00:00:00
redhatcve
redhatcve
CVE-2022-45932
2022-11-29 21:56:08
nvd
nvd
CVE-2022-45932
2022-11-27 03:15:11
prion
prion
Sql injection
2022-11-27 03:15:00
cve
cve
CVE-2022-45932
2022-11-27 03:15:11