Authentication flaw

In ONAP SO through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...

PT-2020-9290

Name of the Vulnerable Software and Affected Versions ONAP DCAE versions through Dublin ONAP Operations Manager OOM setups affected versions not specified Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports. The affected...

PT-2020-9291

Name of the Vulnerable Software and Affected Versions ONAP OOM versions through Dublin Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports. All ONAP Operations Manager setups are affected. Recommendations For versions...

PT-2020-9293

Name of the Vulnerable Software and Affected Versions ONAP MSB versions through Dublin Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports, including 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and 30271. All...

PT-2020-9289

Name of the Vulnerable Software and Affected Versions ONAP Logging through Dublin affected versions not specified ONAP Operations Manager OOM setups affected versions not specified Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing...

PT-2020-9292

Name of the Vulnerable Software and Affected Versions ONAP SO through Dublin ONAP Operations Manager OOM setups affected versions not specified Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports, including 30234, 30290,...

CVE-2019-12125: Missing Authentication for Critical Function

In ONAP Logging through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...