Skip to main content

Incorrect Comparison

CVE-2022-29944

Medium
5.3/10

Summary

An issue was discovered in ONOS versions through 2.5.1. There is an incorrect comparison of paths installed by intent. An existing intent does not redirect to a new path, even if a new intent that shares the path with higher priority is installed.

  • LOW
  • NETWORK
  • NONE
  • UNCHANGED
  • NONE
  • NONE
  • NONE
  • LOW

CWE-697 - Incorrect Comparison

The software compares two entities in a security-relevant context, but the comparison is incorrect, which may lead to resultant weaknesses.

References

Advisory Timeline

  • Published