3 matches found
CVE-2019-12122
An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected...
CVE-2019-12122: Cleartext Transmission of Sensitive Information
An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected...
PT-2020-9286
Name of the Vulnerable Software and Affected Versions ONAP Portal through Dublin Description An issue was discovered in ONAP Portal, where an attacker who possesses a user's cookie may retrieve that user's password from the database by executing a call to "ONAPPORTAL/portalApi/loggedinUser". All...