Vulnerability Details CVE-2019-12131
An issue was detected in ONAP APPC through Dublin and SDC through Dublin. By setting a USER_ID parameter in an HTTP header, an attacker may impersonate an arbitrary existing user without any authentication. All APPC and SDC setups are affected.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.6%
CVSS Severity
CVSS v3 Score 9.1
CVSS v2 Score 6.4
Products affected by CVE-2019-12131
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.0
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.1
-
cpe:2.3:a:onap:open_network_automation_platform:3.0.2