CVE-2015-1857: Linuxfoundation Opendaylight

Medium severity, CVSS 5.3. EPSS: 1.7% chance of exploitation in the next 30 days.

The odl-mdsal-apidocs feature in OpenDaylight Helium allow remote attackers to obtain sensitive information by leveraging missing AAA restrictions.

Affected products

• Linuxfoundation Opendaylight: before 0.2.4 (fixed in 0.2.4)

Published 2018-04-27. Last modified 2026-06-17.