CVE-2019-12132

An issue was discovered in ONAP SDNC before Dublin. By executing sla/dgUpload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected...

CVE-2019-12132

ONAP SDNC (pre-Dublin) is affected by an OS command injection via a crafted filename parameter in sla/dgUpload, enabling unauthenticated arbitrary command execution. All SDNC deployments that include admportal are impacted. Root cause: input in the filename is unsafely handled, leading to command...