CVE-2025-29314: High severity Opendaylight Service Function Chaining vulnerability
Insecure Shiro cookie configurations in OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4 and below allow attackers to access sensitive information via a man-in-the-middle attack.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-29314?
CVE-2025-29314 is classified as a high severity vulnerability due to its potential for sensitive information exposure.
How do I fix CVE-2025-29314?
To mitigate CVE-2025-29314, review and secure the Shiro cookie configurations in the affected versions of OpenDaylight Service Function Chaining.
What are the affected versions for CVE-2025-29314?
CVE-2025-29314 affects OpenDaylight Service Function Chaining Sodium-SR4 and earlier, along with versions of odl-sfc-openflow-renderer and odl-sfc-ovs up to 0.10.4.
What types of attacks can exploit CVE-2025-29314?
CVE-2025-29314 can be exploited through man-in-the-middle attacks, allowing unauthorized access to sensitive information.
Is CVE-2025-29314 detectable by security tools?
Many security tools may identify CVE-2025-29314 based on its insecure cookie configurations, but manual verification is also recommended.