[OJSI-174] Multiple SQL Injection issues in Portal (CVE-2019-12318) - ONAP JIRA

Clone

Clone+

Clone++

XML

Word

Printable

Type: Task
Status: Public disclosure
Priority: Medium
Resolution: Done
Affects Version/s: Casablanca Maintenance Release, Dublin Release, Casablanca
Fix Version/s: Frankfurt Release
Labels:

OJSI CVE:
CVE-2019-12318
OJSI Impact Description:

Hide

Title: SQL Injections in Portal

Reporter: Jakub Botwicz and Łukasz Wrochna from Samsung

Products: Portal

Affects: Dublin and earlier

Description:

Jakub Botwicz and Łukasz Wrochna from Samsung reported a number of vulnerabilities in ONAP Portal. By providing a crafted user input, an attacker gains access to the service database. All ONAP setups are affected.

Show
Title: SQL Injections in Portal Reporter: Jakub Botwicz and Łukasz Wrochna from Samsung Products: Portal Affects: Dublin and earlier Description: Jakub Botwicz and Łukasz Wrochna from Samsung reported a number of vulnerabilities in ONAP Portal. By providing a crafted user input, an attacker gains access to the service database. All ONAP setups are affected.
OJSI Grant Project Access:
OJSI-PORTAL
Epic Link:
Number of SQL Injections in ONAP services

No reviews matched the request. Check your Options in the drop-down menu of this sections header.