CVE-2025-29315: Critical severity Opendaylight Service Function Chaining (SFC) vulnerability
An issue in the Shiro-based RBAC (Role-based Access Control) mechanism of OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4 and below allows attackers to execute privileged operations via a crafted request.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-29315?
CVE-2025-29315 is considered a critical severity vulnerability due to its potential to allow unauthorized privileged operations.
How do I fix CVE-2025-29315?
To fix CVE-2025-29315, it is recommended to upgrade to OpenDaylight Service Function Chaining version later than Sodium-SR4.
Who is affected by CVE-2025-29315?
CVE-2025-29315 affects users of OpenDaylight Service Function Chaining (SFC) versions up to and including Sodium-SR4.
What is the impact of CVE-2025-29315?
The impact of CVE-2025-29315 includes the possibility for attackers to gain elevated privileges and perform unauthorized actions.
What kind of attacks can CVE-2025-29315 facilitate?
CVE-2025-29315 can facilitate attacks that involve executing privileged operations without proper authorization.