exploitDog

CVE-2019-12124

Опубликовано: 18 мар. 2020

Источник: nvd

CVSS3: 9.1

CVSS2: 6.4

EPSS Низкий

Описание

An issue was discovered in ONAP APPC before Dublin. By using an exposed unprotected Jolokia interface, an unauthenticated attacker can read or overwrite an arbitrary file. All APPC setups are affected.

Ссылки

https://jira.onap.org/browse/OJSI-63
Exploit
Patch
Vendor Advisory
https://jira.onap.org/browse/OJSI-63
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:onap:open_network_automation_platform:*:*:*:*:*:*:*:*

Версия от 3.0.0 (включая) до 4.0.0 (исключая)

EPSS

Процентиль: 68%

0.00565

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-hc62-j25w-cgcv

github

больше 3 лет назад

An issue was discovered in ONAP APPC before Dublin. By using an exposed unprotected Jolokia interface, an unauthenticated attacker can read or overwrite an arbitrary file. All APPC setups are affected.

EPSS

Процентиль: 68%

0.00565

Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

NVD-CWE-noinfo