CVE-2019-12126

Name of the Vulnerable Software and Affected Versions ONAP DCAE versions through Dublin ONAP Operations Manager (OOM) setups (affected versions not specified)

Description The issue allows an attacker to gain full access to ONAP services without authentication by accessing specific ports. The affected ports include 30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and 30271.

Recommendations For ONAP DCAE versions through Dublin, restrict access to the specified ports (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and 30271) to prevent unauthorized access. For all ONAP Operations Manager (OOM) setups, consider implementing authentication mechanisms for ONAP services to mitigate the risk of exploitation.