188 matches found
CVE-2019-12130
In ONAP CLI through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
Authentication flaw
In ONAP MSB through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
Authentication flaw
In ONAP CLI through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
Authentication flaw
In ONAP SO through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
CVE-2019-12130
In ONAP CLI through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
CVE-2019-12130
CVE-2019-12130 describes an unauthenticated access flaw in ONAP CLI (Dublin) where, by targeting specific ports (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, 30271), an attacker can gain full access to the respective ONAP services. The vulnerability affects all ONAP Operations Manager ...
CVE-2019-12129
In ONAP MSB through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
CVE-2019-12129
CVE-2019-12129 affects ONAP MSB (Dublin and earlier) with an authentication bypass that enables unauthenticated access to multiple ONAP services via specific ports (e.g., 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, 30271). The description across sources consistently states that this g...
CVE-2019-12128
In ONAP SO through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
CVE-2019-12128
CVE-2019-12128 affects ONAP SO (Dublin and prior) with an authorization flaw: by contacting any of ports 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, or 30271, an attacker gains full access to the corresponding ONAP services without authentication. Documents consistently describe this ...
CVE-2019-12128
In ONAP SO through Dublin, by accessing an applicable port 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271, an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager OOM setups are affected...
ONAP SDNC Operating System Command Injection Vulnerability (CNVD-2020-28483)
The ONAP SDNC is a network-defined network controller from the ONAP program. ONAP SDNC suffers from an operating system command injection vulnerability. The vulnerability can be exploited to execute arbitrary commands with the help of a specially crafted 'module' parameter...
Unspecified Vulnerability in ONAP Portal
ONAP Portal is a visual design tool for parsing applications from the ONAP project. An unspecified vulnerability exists in ONAP Portal that stems from incorrect access control. An attacker can exploit the vulnerability by calling ONAPPORTAL/portalApi/loggedinUser to obtain sensitive information...
Unspecified vulnerability in ONAP Portal (CNVD-2020-28481)
ONAP Portal is a visual design tool for parsing applications from the ONAP project. An unspecified vulnerability exists in ONAP Portal. An attacker could exploit the vulnerability to decrypt information...
PT-2020-9290
Name of the Vulnerable Software and Affected Versions ONAP DCAE versions through Dublin ONAP Operations Manager OOM setups affected versions not specified Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports. The affected...
PT-2020-9291
Name of the Vulnerable Software and Affected Versions ONAP OOM versions through Dublin Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports. All ONAP Operations Manager setups are affected. Recommendations For versions...
PT-2020-9293
Name of the Vulnerable Software and Affected Versions ONAP MSB versions through Dublin Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports, including 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and 30271. All...
PT-2020-9294
Name of the Vulnerable Software and Affected Versions ONAP CLI through Dublin Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports, including 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and 30271. All ONAP...
PT-2020-9289
Name of the Vulnerable Software and Affected Versions ONAP Logging through Dublin affected versions not specified ONAP Operations Manager OOM setups affected versions not specified Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing...
PT-2020-9292
Name of the Vulnerable Software and Affected Versions ONAP SO through Dublin ONAP Operations Manager OOM setups affected versions not specified Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports, including 30234, 30290,...