GHSA-4px2-gqhv-mrc7
Password change doesn't result in Karaf clearing cache
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | org.opendaylight.integration:distribution-karaf | <= 0.6.4-Carbon | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
OpenDaylight Karaf 0.6.1-Carbon fails to clear the cache after a password change, allowing the old password to be used until the Karaf cache is manually cleared (e.g. via restart).
References
External links from the advisory. They lead to third-party sites.