CVE-2019-12132

An issue was discovered in ONAP SDNC before Dublin. By executing sla/dgUpload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected...

CVE-2019-12132

ONAP SDNC (pre-Dublin) is affected by an OS command injection via a crafted filename parameter in sla/dgUpload, enabling unauthenticated arbitrary command execution. All SDNC deployments that include admportal are impacted. Root cause: input in the filename is unsafely handled, leading to command...

CVE-2019-12123

An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsXml with a crafted module parameter, an authenticated user can execute an arbitrary command. All SDC setups that include admportal are affected...

CVE-2019-12123

CVE-2019-12123 affects ONAP SDNC prior to Dublin. An authenticated user can trigger arbitrary command execution by calling sla/printAsXml with a crafted module parameter, impacting all SDC deployments that include admportal. The connected Red Hat and CNVD entries confirm the same issue, but the d...

CVE-2019-12113

An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsGv with a crafted module parameter, an authenticated user can execute an arbitrary command. All SDC setups that include admportal are affected...

CVE-2019-12113

ONAP SDNC (pre-Dublin) is affected by a command-injection vulnerability in sla/printAsGv triggered by a crafted module parameter. An authenticated user can execute arbitrary commands, impacting all SDC deployments that include admportal. The CVE-2019-12113 issue is documented with a high-severity...

CVE-2019-12112

CVE-2019-12112 affects ONAP SDNC (pre-Dublin). The issue arises when an unauthenticated user uses sla/upload with a crafted filename parameter, allowing arbitrary command execution. All SDC setups that include admportal are affected. The provided documents do not specify the exact vulnerable vers...

CVE-2019-12112

An issue was discovered in ONAP SDNC before Dublin. By executing sla/upload with a crafted filename parameter, an unauthenticated attacker can execute an arbitrary command. All SDC setups that include admportal are affected...