CVE-2025-29315
CVSS 3.1 Score 9.8 of 10 (high)
Details
Published Mar 24, 2025
Updated: Mar 27, 2025
CWE ID 284
Summary
CVE-2025-29315 is a vulnerability affecting the Role-based Access Control (RBAC) mechanism in OpenDaylight Service Function Chaining (SFC) Subproject SFC Sodium-SR4 and older versions. This issue enables attackers to execute privileged operations by sending crafted requests, taking advantage of a flaw in the Shiro library used for authentication. Successful exploitation could lead to unauthorized access and potential data breaches. It is strongly recommended that users upgrade to a patched version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.