CVE-2019-12124

EUVD-2019-3775
An issue was discovered in ONAP APPC before Dublin. By using an exposed unprotected Jolokia interface, an unauthenticated attacker can read or overwrite an arbitrary file. All APPC setups are affected.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.1 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 68%
Affected Products (NVD)
VendorProductVersion
onapopen_network_automation_platform
3.0.0 ≤
𝑥
< 4.0.0
𝑥
= Vulnerable software versions
References
https://jira.onap.org/browse/OJSI-63
https://jira.onap.org/browse/OJSI-63