CVE-2019-12123

CVE-2019-12123 affects ONAP SDNC prior to Dublin. An authenticated user can trigger arbitrary command execution by calling sla/printAsXml with a crafted module parameter, impacting all SDC deployments that include admportal. The connected Red Hat and CNVD entries confirm the same issue, but the d...

CVE-2019-12123

An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsXml with a crafted module parameter, an authenticated user can execute an arbitrary command. All SDC setups that include admportal are affected...

CVE-2019-12122

CVE-2019-12122 affects ONAP Portal (Dublin) where calling the endpoint ONAPPORTAL/portalApi/loggedinUser can allow an attacker who has a user’s cookie to retrieve that user’s password from the database. The Red Hat and NVD entries confirm the same issue across all Portal setups. The provided docu...

CVE-2019-12122

An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected...

CVE-2019-12121

The CVE-2019-12121 entry concerns ONAP Portal (Dublin) and describes a padding oracle weakness in the ONAPPORTAL/processSingleSignOn UserId field. Attackers could decrypt information encrypted with the same symmetric key as UserId, affecting all Portal deployments. The connected Red Hat and other...

CVE-2019-12121

An issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using the ONAPPORTAL/processSingleSignOn UserId field, an attacker is able to decrypt arbitrary information encrypted with the same symmetric key as UserId. All Portal setups are affected...

CVE-2019-12120

CVE-2019-12120 affects ONAP VNFSDK (Dublin) where an unauthenticated attacker with pod-to-pod access can reach port 8000 and execute arbitrary code inside the vulnerable pod. Multiple sources (including Red Hat, NVD/NVD-variant, and CVE listings) describe the same impact: remote code execution wi...

CVE-2019-12120

An issue was discovered in ONAP VNFSDK through Dublin. By accessing port 8000 of demo-vnfsdk-vnfsdk, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12119

An issue was discovered in ONAP SDC through Dublin. By accessing port 7000 of demo-sdc-sdc-wfd-fe pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12119

Affected software: ONAP SDC (Dublin) components; vulnerable component is the demo-sdc-sdc-wfd-fe pod. Root cause / condition: An unauthenticated attacker who already has pod-to-pod access can access port 7000 and execute arbitrary code inside that pod. Impact: All ONAP Operations Manager (OOM) de...

CVE-2019-12118

An issue was discovered in ONAP SDC through Dublin. By accessing port 7001 of demo-sdc-sdc-wfd-be pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12118

The CVE-2019-12118 entry describes an unauthenticated remote code execution in ONAP SDC (Dublin) reachable via port 7001 on the demo-sdc-sdc-wfd-be pod, affecting all ONAP Operations Manager (OOM) deployments. The issue requires pod-to-pod access and allows code execution inside the targeted pod....

CVE-2019-12117

An issue was discovered in ONAP SDC through Dublin. By accessing port 4001 of demo-sdc-sdc-onboarding-be pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12117

CVE-2019-12117 affects ONAP SDC (Dublin) specifically via the demo-sdc-sdc-onboarding-be pod: by accessing port 4001, an unauthenticated attacker with pod-to-pod access can execute arbitrary code inside the pod. The impact is described as remote code execution affecting all ONAP Operations Manage...

CVE-2019-12116

CVE-2019-12116 affects ONAP SDC (Dublin) and all ONAP Operations Manager (OOM) setups. Affected component is the demo-sdc-sdc-fe pod, where an unauthenticated attacker who already has pod-to-pod access can access port 6000 and potentially execute arbitrary code inside the pod. The description con...

CVE-2019-12116

An issue was discovered in ONAP SDC through Dublin. By accessing port 6000 of demo-sdc-sdc-fe pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12115

An issue was discovered in ONAP SDC through Dublin. By accessing port 4000 of demo-sdc-sdc-be pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12115

The CVE-2019-12115 issue affects ONAP SDC (Dublin) via port 4000 on the demo-sdc-sdc-be pod, where an unauthenticated attacker with pod-to-pod access can execute arbitrary code inside the targeted pod. Connected CVE sources (Red Hat, CNVD, NVD, etc.) describe the same vulnerability: code executio...

CVE-2019-12114

An issue was discovered in ONAP HOLMES before Dublin. By accessing port 9202 of dep-holmes-engine-mgmt pod, an unauthenticated attacker who already has access to pod-to-pod communication may execute arbitrary code inside that pod. All ONAP Operations Manager OOM setups are affected...

CVE-2019-12114

CVE-2019-12114 affects ONAP HOLMES prior to Dublin. An unauthenticated attacker with pod-to-pod access can connect to port 9202 on the dep-holmes-engine-mgmt pod and execute arbitrary code inside that pod, impacting all ONAP Operations Manager (OOM) deployments. The available documents confirm th...