CVE-2019-12121

An issue was detected in ONAP Portal through Dublin

published March 18, 2020

CVSS
—
EPSS
1%
Percentile
53.6
In the wild
Unconfirmed
What it is

An issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using the ONAPPORTAL/processSingleSignOn UserId field, an attacker is able to decrypt arbitrary information encrypted with the same symmetric key as UserId. All Portal setups are affected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00725 · 53.6th percentile
Published
2020-03-18T17:18Z
EPSS history
Timeline
  • 18 MAR 17:18Z
    An issue was detected in ONAP Portal through Dublin
    cvelistv5