Uploaded image for project: 'ONAP JIRA Security Issues'
  1. ONAP JIRA Security Issues
  2. OJSI-28

Unsecured Swagger UI Interface in xdcae-datafile-collector

CloneClone+Clone++
    XMLWordPrintable

Details

    • Task
    • Status: Public disclosure
    • Medium
    • Resolution: Done
    • Casablanca Maintenance Release, Casablanca
    • El Alto Release

    Description

      Unsecured Swagger UI (swagger-ui.html) Interface in xdcae-datafile-collector (30223/tcp)
      Possibility to stop Data file (/stopDatafile)

      Attachments

        Issue Links

          relates to

          Task - A task that needs to be done. OJSI-131 dcae-datafile-collector exposes plain text HTTP endpoint using port 30262

          • Highest - Catastrophic defect that causes total failure of the software or unrecoverable data loss with no available workaround. Complete shut-down of the process, nothing can proceed further. Blocks testing of the product / feature. Must be fixed in the next build.
          • Public disclosure
          No reviews matched the request. Check your Options in the drop-down menu of this sections header.

          Activity

            People

              Jakub.Botwicz Jakub Botwicz
              Jakub.Botwicz Jakub Botwicz
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: