CVE-2019-15137 - The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions themselves), which can lead to unintended connections between participants in a Data Distribution Service (DDS) network

Back Back to CVE browser

HIGH

The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions themselves), which can lead to unintended connections between participants in a Data Distribution Service (DDS) network

Published Aug 18, 2019

7.5

HIGH

CVSS 3.0

EPSS 1.31%

Description

The Access Control plugin in eProsima Fast RTPS through 1.9.0 allows fnmatch pattern matches with topic name strings (instead of the permission expressions themselves), which can lead to unintended connections between participants in a Data Distribution Service (DDS) network.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (3)

https://arxiv.org/abs/1908.05310
x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6205
Advisory
https://github.com/eProsima/Fast-RTPS/issues/441
x_refsource_MISCPatchThird Party Advisory

Link	Providers	Tags
https://arxiv.org/abs/1908.05310		x_refsource_MISCThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2019-6205		Advisory
https://github.com/eProsima/Fast-RTPS/issues/441		x_refsource_MISCPatchThird Party Advisory