Vulnerability Details CVE-2019-12130
In ONAP CLI through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full access to the respective ONAP services without any authentication. All ONAP Operations Manager (OOM) setups are affected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 61.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 10.0
Products affected by CVE-2019-12130
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.0
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.1
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.2
-
cpe:2.3:a:onap:open_network_automation_platform:4.0.0