CVE-2019-12118

An issue was discovered in ONAP SDC through Dublin

published March 18, 2020

CVSS
—
EPSS
2%
Percentile
81.2
In the wild
Unconfirmed
What it is

⚠️ An unauthenticated attacker can execute arbitrary code just by accessing port 7001 of a vulnerable ONAP SDC pod! Talk about a security oversight! 🔥 Think of this vulnerability like a restaurant where the backdoor is wide open and anyone with access to the kitchen can start cooking. If someone sneaks in through that backdoor, they can create any dish they want, potentially ruining dinner for everyone! If exploited, this vulnerability could allow an attacker to execute any code within the ONAP pod, which could lead to unauthorized access to sensitive data or even complete system takeover. In a world where every operation counts, the implications could be absolutely devastating!

Put simply

Think of this vulnerability like a restaurant where the backdoor is wide open and anyone with access to the kitchen can start cooking. If someone sneaks in through that backdoor, they can create any dish they want, potentially ruining dinner for everyone! This flaw in ONAP SDC allows an unauthenticated attacker with pod-to-pod communication access to exploit port 7001 and run arbitrary code inside the demo-sdc-sdc-wfd-be pod, compromising the entire environment.

What to do

If exploited, this vulnerability could allow an attacker to execute any code within the ONAP pod, which could lead to unauthorized access to sensitive data or even complete system takeover. In a world where every operation counts, the implications could be absolutely devastating! To safeguard your setup, ensure that all access to port 7001 is restricted and review pod communication policies. It’s essential to apply any recommended updates from ONAP to reinforce security. Don’t wait to lock those doors! You've got this! Follow these steps and you’ll have your ONAP environment secure in no time! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02065 · 81.2th percentile
Published
2020-03-18T17:08Z
EPSS history
Timeline
  • 18 MAR 17:08Z
    An issue was discovered in ONAP SDC through Dublin
    cvelistv5