Uploaded image for project: 'ONAP JIRA Security Issues'
  1. ONAP JIRA Security Issues
  2. OJSI-161

xdcae-tca-analytics exposes plain text HTTP endpoint using port 32010

CloneClone+Clone++
    XMLWordPrintable

Details

    Attachments

      Issue Links

        relates to

        Sub-task - The sub-task of the issue OJSI-167 Port 32010 exposes unprotected service outside of cluster

        • Highest - Catastrophic defect that causes total failure of the software or unrecoverable data loss with no available workaround. Complete shut-down of the process, nothing can proceed further. Blocks testing of the product / feature. Must be fixed in the next build.
        • Public disclosure

        Task - A task that needs to be done. OJSI-201 DCAE TCA exposes unprotected APIs/UIs (CVE-2019-12126)

        • Highest - Catastrophic defect that causes total failure of the software or unrecoverable data loss with no available workaround. Complete shut-down of the process, nothing can proceed further. Blocks testing of the product / feature. Must be fixed in the next build.
        • Public disclosure
        # Subject Branch Project Status CR V
        88568,3 Document OJSI-161 vulnerability master dcaegen2 Status: MERGED +2 +1
        88985,1 OJSI updates for Dublin branch dublin dcaegen2 Status: MERGED +2 +1

        Activity

          People

            vv770d Vijay Venkatesh Kumar
            kopasiak Krzysztof Opasiak
            Votes:
            0 Vote for this issue
            Watchers:
            2 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: