[OJSI-205] CLI exposes unprotected APIs/UIs (CVE-2019-12130) - ONAP JIRA

Clone

Clone+

Clone++

XML

Word

Printable

Type: Task
Status: Under review
Priority: Highest
Resolution: Unresolved
Affects Version/s: Casablanca Maintenance Release, Dublin Release, Casablanca
Fix Version/s: Frankfurt Release
Labels:
- CVE_ASSIGNED
- PENTEST032019

OJSI CVE:
CVE-2019-12130
OJSI Impact Description:

Hide

Title: Unprotected APIs/UIs exposed in CLI project

Reporter: Jakub Botwicz, Wojciech Rauner, Łukasz Wrochna and Radosław Żeszczuk from Samsung

Products: CLI

Affects: Dublin and earlier

Description:

Jakub Botwicz, Wojciech Rauner, Łukasz Wrochna and Radosław Żeszczuk from Samsung reported a vulnerability in ONAP CLI. By accessing port 30271, an attacker gains full access to the respective ONAP service without any authentication. All ONAP OOM setups are affected.

Show
Title: Unprotected APIs/UIs exposed in CLI project Reporter: Jakub Botwicz, Wojciech Rauner, Łukasz Wrochna and Radosław Żeszczuk from Samsung Products: CLI Affects: Dublin and earlier Description: Jakub Botwicz, Wojciech Rauner, Łukasz Wrochna and Radosław Żeszczuk from Samsung reported a vulnerability in ONAP CLI. By accessing port 30271, an attacker gains full access to the respective ONAP service without any authentication. All ONAP OOM setups are affected.
OJSI Grant Project Access:
OJSI-CLI
Epic Link:
Unprotected APIs/UIs exposed