PT-2020-9288
CVE-2019-12124
·
تاريخ النشر
2020-03-18
·
تاريخ التحديث
2020-08-24
الوصف من
CVSS 3.1
9.1
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions
ONAP APPC versions prior to Dublin
Description
An issue was discovered in ONAP APPC, where an exposed unprotected Jolokia interface can be used by an unauthenticated attacker to read or overwrite an arbitrary file. All APPC setups are affected.
Recommendations
For versions prior to Dublin, consider disabling the exposed Jolokia interface as a temporary workaround until a patch is available. Restrict access to the Jolokia interface to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾