It was found that the code was insecure in some way.
ONOS 1.0.0 Avocet is confirmed to be affected.
<LINK>
Back to security advisories main page