Vulnerability Details CVE-2019-12129
In ONAP MSB through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
Products affected by CVE-2019-12129
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.0
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.1
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.2
-
cpe:2.3:a:onap:open_network_automation_platform:4.0.0