CVE-2022-45931: SQL Injection
A SQL injection issue was discovered in AAA in OpenDaylight (ODL) before 0.16.5. The aaa-idm-store-h2/src/main/java/org/opendaylight/aaa/datastore/h2/UserStore.java deleteUser function is affected when the API interface /auth/v1/users/ is used.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2022-45931?
CVE-2022-45931 is a SQL injection vulnerability that can potentially allow unauthorized access to the database.
How do I fix CVE-2022-45931?
To mitigate CVE-2022-45931, update OpenDaylight to version 0.16.5 or later where the vulnerability has been patched.
Which versions of OpenDaylight are affected by CVE-2022-45931?
CVE-2022-45931 affects OpenDaylight versions 0.15.0, 0.15.6, 0.16.0, and 0.16.4.
What components are impacted by CVE-2022-45931?
CVE-2022-45931 specifically affects the UserStore.java deleteUser function in the AAA component of OpenDaylight.
What is the impact of exploiting CVE-2022-45931?
Exploiting CVE-2022-45931 can allow attackers to execute arbitrary SQL queries against the database, leading to data compromise.