CVE-2019-12125

In ONAP Logging through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full…

published March 19, 2020

CVSS
—
EPSS
1%
Percentile
69.0
In the wild
Unconfirmed
What it is

⚡ A single open port is all it takes for attackers to waltz into your ONAP services without a password! Imagine a restaurant with several back doors, all unlocked and ready for anyone to stroll in — that’s the situation here. Each of those ports is like an unattended entrance inviting trouble! If an attacker finds their way in, they could have full control over your ONAP services, potentially causing chaos by accessing sensitive data or altering configurations. It's like leaving your restaurant’s kitchen open to anyone who wants to tamper with the recipes!

Put simply

Imagine a restaurant with several back doors, all unlocked and ready for anyone to stroll in — that’s the situation here. Each of those ports is like an unattended entrance inviting trouble! This vulnerability allows unauthorized access to ONAP services through specific ports (like 30234, 30290, 32010, etc.), bypassing any authentication mechanisms entirely.

What to do

If an attacker finds their way in, they could have full control over your ONAP services, potentially causing chaos by accessing sensitive data or altering configurations. It's like leaving your restaurant’s kitchen open to anyone who wants to tamper with the recipes! To safeguard your system, immediately restrict access to these ports and implement proper firewall rules. Regularly audit your network configuration to ensure no other unprotected services are lurking around! You've got this! Act now to secure your ONAP setup and keep those pesky intruders at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01242 · 69.0th percentile
Published
2020-03-19T17:30Z
EPSS history
Timeline
  • 19 MAR 17:30Z
    In ONAP Logging through Dublin, by accessing an applicable port (30234, 30290, 32010, 30270, 30224, 30281, 30254, 30285, and/or 30271), an attacker gains full…
    cvelistv5