An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of flow rules installed by intents. A remote attacker can install or remove a new intent, and consequently modify or delete the existing flow rules related to other intents.
The product compares two entities in a security-relevant context, but the comparison is incorrect.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Onos | Opennetworking | 2.5.1 (including) | 2.5.1 (including) |
This Pillar covers several possibilities: