CVE-2019-12121

The CVE-2019-12121 entry concerns ONAP Portal (Dublin) and describes a padding oracle weakness in the ONAPPORTAL/processSingleSignOn UserId field. Attackers could decrypt information encrypted with the same symmetric key as UserId, affecting all Portal deployments. The connected Red Hat and other...

CVE-2019-12120

An issue was discovered in ONAP VNFSDK through Dublin. By accessing port 8000 of demo-vnfsdk-vnfsdk, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12120

CVE-2019-12120 affects ONAP VNFSDK (Dublin) where an unauthenticated attacker with pod-to-pod access can reach port 8000 and execute arbitrary code inside the vulnerable pod. Multiple sources (including Red Hat, NVD/NVD-variant, and CVE listings) describe the same impact: remote code execution wi...

CVE-2019-12119

An issue was discovered in ONAP SDC through Dublin. By accessing port 7000 of demo-sdc-sdc-wfd-fe pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12119

Affected software: ONAP SDC (Dublin) components; vulnerable component is the demo-sdc-sdc-wfd-fe pod. Root cause / condition: An unauthenticated attacker who already has pod-to-pod access can access port 7000 and execute arbitrary code inside that pod. Impact: All ONAP Operations Manager (OOM) de...

CVE-2019-12118

An issue was discovered in ONAP SDC through Dublin. By accessing port 7001 of demo-sdc-sdc-wfd-be pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12118

The CVE-2019-12118 entry describes an unauthenticated remote code execution in ONAP SDC (Dublin) reachable via port 7001 on the demo-sdc-sdc-wfd-be pod, affecting all ONAP Operations Manager (OOM) deployments. The issue requires pod-to-pod access and allows code execution inside the targeted pod....

CVE-2019-12117

An issue was discovered in ONAP SDC through Dublin. By accessing port 4001 of demo-sdc-sdc-onboarding-be pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12117

CVE-2019-12117 affects ONAP SDC (Dublin) specifically via the demo-sdc-sdc-onboarding-be pod: by accessing port 4001, an unauthenticated attacker with pod-to-pod access can execute arbitrary code inside the pod. The impact is described as remote code execution affecting all ONAP Operations Manage...

CVE-2019-12116

An issue was discovered in ONAP SDC through Dublin. By accessing port 6000 of demo-sdc-sdc-fe pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12116

CVE-2019-12116 affects ONAP SDC (Dublin) and all ONAP Operations Manager (OOM) setups. Affected component is the demo-sdc-sdc-fe pod, where an unauthenticated attacker who already has pod-to-pod access can access port 6000 and potentially execute arbitrary code inside the pod. The description con...

CVE-2019-12115

An issue was discovered in ONAP SDC through Dublin. By accessing port 4000 of demo-sdc-sdc-be pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12115

The CVE-2019-12115 issue affects ONAP SDC (Dublin) via port 4000 on the demo-sdc-sdc-be pod, where an unauthenticated attacker with pod-to-pod access can execute arbitrary code inside the targeted pod. Connected CVE sources (Red Hat, CNVD, NVD, etc.) describe the same vulnerability: code executio...

CVE-2019-12114

An issue was discovered in ONAP HOLMES before Dublin. By accessing port 9202 of dep-holmes-engine-mgmt pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12114

CVE-2019-12114 affects ONAP HOLMES prior to Dublin. An unauthenticated attacker with pod-to-pod access can connect to port 9202 on the dep-holmes-engine-mgmt pod and execute arbitrary code inside that pod, impacting all ONAP Operations Manager (OOM) deployments. The available documents confirm th...

CVE-2019-12113

ONAP SDNC (pre-Dublin) is affected by a command-injection vulnerability in sla/printAsGv triggered by a crafted module parameter. An authenticated user can execute arbitrary commands, impacting all SDC deployments that include admportal. The CVE-2019-12113 issue is documented with a high-severity...

CVE-2019-12112

An issue was discovered in ONAP SDNC before Dublin. By executing sla/upload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected...

CVE-2019-12112

CVE-2019-12112 affects ONAP SDNC (pre-Dublin). The issue arises when an unauthenticated user uses sla/upload with a crafted filename parameter, allowing arbitrary command execution. All SDC setups that include admportal are affected. The provided documents do not specify the exact vulnerable vers...

PT-2020-9283

Name of the Vulnerable Software and Affected Versions ONAP SDC versions through Dublin ONAP Operations Manager OOM setups affected versions not specified Description An issue was discovered in ONAP SDC, allowing an unauthenticated attacker with access to pod-to-pod communication to execute...

PT-2020-9287

Name of the Vulnerable Software and Affected Versions ONAP SDNC versions prior to Dublin Description An issue was discovered in ONAP SDNC where an authenticated user can execute an arbitrary command by executing sla/printAsXml with a crafted module parameter. All SDC setups that include admportal...