{"action":"Upgrade org.opendaylight.odlparent:opendaylight-karaf-resources to 0.2.3-Helium-SR3 or later.","affected":[{"fixed":"0.2.3-Helium-SR3","introduced":"0"}],"component":"org.opendaylight.odlparent:opendaylight-karaf-resources","cve_ids":["CVE-2015-1778"],"ecosystem":"Maven","epss":0.02737,"exploited":false,"fixed_versions":["0.2.3-Helium-SR3"],"ghsa_id":"GHSA-qm24-4869-99pj","id":"tcs_01M5N99R87BEJMVNM2CQ9B346F","modified_at":"2026-06-30T19:45:15.056322858Z","published_at":"2022-05-17T02:36:11Z","references":["https://osv.dev/vulnerability/GHSA-qm24-4869-99pj","https://nvd.nist.gov/vuln/detail/CVE-2015-1778","https://web.archive.org/web/20150510044305/https://git.opendaylight.org/gerrit/#/c/16307","https://web.archive.org/web/20150510044305/https://wiki.opendaylight.org/view/Security_Advisories#.5BImportant.5D_CVE-2015-1778_OpenDaylight:_authentication_bypass","http://www.openwall.com/lists/oss-security/2015/03/20/3"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-qm24-4869-99pj","url":"https://osv.dev/vulnerability/GHSA-qm24-4869-99pj"}],"summary":"Opendaylight will authenticate any username and password combination"}