Design/Logic Flaw

2020-03-1819:15:00

PRIOn knowledge base

www.prio-n.com

8.5 High

AI Score

Confidence

High

0.004 Low

EPSS

Percentile

72.9%

JSON

An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsGv with a crafted module parameter, an authenticated user can execute an arbitrary command. All SDC setups that include admportal are affected.

CPENameOperatorVersion
open_network_automation_platformlt4.0.0

CPE	Name	Operator	Version
	open_network_automation_platform	lt	4.0.0

References

jira.onap.org/browse/OJSI-43