1. Home
  2. CVE Database
  3. CVE-2019-12123
HIGH · 8.8

CVE-2019-12123

An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsXml with a crafted module parameter, an authenticated user can execute an arbitrary command. All SDC setups that include adm...

Vulnerability Description

An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsXml with a crafted module parameter, an authenticated user can execute an arbitrary command. All SDC setups that include admportal are affected.

CVSS Score

8.8

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
OnapOpen Network Automation Platform>= 3.0.0, < 4.0.0

Related Weaknesses (CWE)

CWE-78

References

FAQ

What is CVE-2019-12123?

CVE-2019-12123 is a vulnerability with a CVSS score of 8.8 (HIGH). An issue was discovered in ONAP SDNC before Dublin. By executing sla/printAsXml with a crafted module parameter, an authenticated user can execute an arbitrary command. All SDC setups that include adm...

How severe is CVE-2019-12123?

CVE-2019-12123 has been rated HIGH with a CVSS base score of 8.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2019-12123?

Check the references section above for vendor advisories and patch information. Affected products include: Onap Open Network Automation Platform.