CVE-2020-18685 – Floodlight through 1.2 has poor input validation in checkFlow in StaticFl

4 years ago

Floodlight through 1.2 has poor input validation in checkFlow in StaticFlowEntryPusherResource.java because of unchecked prerequisites related to TCP or UDP ports, or group or table IDs.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-18685

Reference (s):

https://drive.google.com/open?id=1oIt6jViGxLALUkLVELsQpC26MJYFZt2U