Vulnerability Details CVE-2019-12125
In ONAP Logging through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 55.9%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
Products affected by CVE-2019-12125
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.0
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.1
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.2