summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPawel Wieczorek <p.wieczorek2@samsung.com>2020-03-12 16:25:43 +0100
committerPawel Wieczorek <p.wieczorek2@samsung.com>2020-03-12 16:39:51 +0100
commitac262d0846be8a8495258014e508bc495f252fe9 (patch)
tree2741903f9f19d7a310060c4f19bac2653e19e757
parent06f9c4044638bc8b0fcbce64e5cabe225953e28e (diff)
Separate file header comment block from file title
This will remove warning: "WARNING: Explicit markup ends without a blank line; unexpected unindent." during documentation build. Issue-ID: SECCOM-264 Change-Id: I23e65c75b2efc3ef7674e8743b5bfdad6bb6a381 Signed-off-by: Pawel Wieczorek <p.wieczorek2@samsung.com>
-rw-r--r--docs/osalist.rst2
-rw-r--r--osa/OSA-2019-001.rst1
-rw-r--r--osa/OSA-2019-002.rst1
-rw-r--r--osa/OSA-2019-003.rst1
-rw-r--r--osa/OSA-2019-004.rst1
-rw-r--r--osa/OSA-2019-005.rst1
-rw-r--r--osa/OSA-2019-006.rst1
-rw-r--r--osa/OSA-2019-007.rst1
-rw-r--r--osa/OSA-2019-008.rst1
-rw-r--r--osa/OSA-2019-009.rst1
-rw-r--r--osa/OSA-2019-010.rst1
-rw-r--r--osa/OSA-2019-011.rst1
-rw-r--r--osa/OSA-2019-012.rst1
-rw-r--r--osa/OSA-2019-013.rst1
-rw-r--r--osa/OSA-2019-014.rst1
-rw-r--r--osa/OSA-2019-015.rst1
-rw-r--r--osa/OSA-2019-016.rst1
-rw-r--r--osa/OSA-2019-017.rst1
-rw-r--r--osa/OSA-2019-018.rst1
-rw-r--r--osa/OSA-2019-019.rst1
-rw-r--r--osa/OSA-2019-020.rst1
-rw-r--r--osa/OSA-2019-021.rst1
-rw-r--r--osa/OSA-2019-022.rst1
-rw-r--r--osa/OSA-2019-023.rst1
-rw-r--r--osa/OSA-2019-024.rst1
-rw-r--r--osa/OSA-2019-025.rst1
-rw-r--r--osa/OSA-2019-026.rst1
27 files changed, 27 insertions, 1 deletions
diff --git a/docs/osalist.rst b/docs/osalist.rst
index 42cbe6a..f789f2d 100644
--- a/docs/osalist.rst
+++ b/docs/osalist.rst
@@ -1,5 +1,5 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
-.. Copyright 2019 Samsung Electronics
+.. Copyright 2019-2020 Samsung Electronics
========================
ONAP Security Advisories
diff --git a/osa/OSA-2019-001.rst b/osa/OSA-2019-001.rst
index ea1507e..7d49088 100644
--- a/osa/OSA-2019-001.rst
+++ b/osa/OSA-2019-001.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=====================================================
OSA-2019-001: Number of XSS vulnerabilities in Portal
=====================================================
diff --git a/osa/OSA-2019-002.rst b/osa/OSA-2019-002.rst
index 00dd257..33372e9 100644
--- a/osa/OSA-2019-002.rst
+++ b/osa/OSA-2019-002.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
===================================
OSA-2019-002: SQL Injection in APPC
===================================
diff --git a/osa/OSA-2019-003.rst b/osa/OSA-2019-003.rst
index fecd6cf..a003d2f 100644
--- a/osa/OSA-2019-003.rst
+++ b/osa/OSA-2019-003.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
====================================
OSA-2019-003: SQL Injections in SDNC
====================================
diff --git a/osa/OSA-2019-004.rst b/osa/OSA-2019-004.rst
index c951e2f..74369a8 100644
--- a/osa/OSA-2019-004.rst
+++ b/osa/OSA-2019-004.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
===================================================================================
OSA-2019-004: SDNC service allows for arbitrary code execution in sla/dgUpload form
===================================================================================
diff --git a/osa/OSA-2019-005.rst b/osa/OSA-2019-005.rst
index 144a526..e0ac395 100644
--- a/osa/OSA-2019-005.rst
+++ b/osa/OSA-2019-005.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=====================================================================================
OSA-2019-005: SDNC service allows for arbitrary code execution in sla/printAsXml form
=====================================================================================
diff --git a/osa/OSA-2019-006.rst b/osa/OSA-2019-006.rst
index 6ef2a75..1b30efd 100644
--- a/osa/OSA-2019-006.rst
+++ b/osa/OSA-2019-006.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
====================================================================================
OSA-2019-006: SDNC service allows for arbitrary code execution in sla/printAsGv form
====================================================================================
diff --git a/osa/OSA-2019-007.rst b/osa/OSA-2019-007.rst
index e38a9f9..ea8240a 100644
--- a/osa/OSA-2019-007.rst
+++ b/osa/OSA-2019-007.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=================================================================================================
OSA-2019-007: APPC exposes Jolokia interface which allows to read and overwrite an arbitrary file
=================================================================================================
diff --git a/osa/OSA-2019-008.rst b/osa/OSA-2019-008.rst
index f37370f..1b72a53 100644
--- a/osa/OSA-2019-008.rst
+++ b/osa/OSA-2019-008.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
==============================================================================
OSA-2019-008: ONAP Portal allows to retrieve password of currently active user
==============================================================================
diff --git a/osa/OSA-2019-009.rst b/osa/OSA-2019-009.rst
index d64d383..bf13b52 100644
--- a/osa/OSA-2019-009.rst
+++ b/osa/OSA-2019-009.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
==========================================================================================
OSA-2019-009: HOLMES exposes JDWP outside of pod which allows for arbitrary code execution
==========================================================================================
diff --git a/osa/OSA-2019-010.rst b/osa/OSA-2019-010.rst
index 4e3dddc..6961a8d 100644
--- a/osa/OSA-2019-010.rst
+++ b/osa/OSA-2019-010.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=======================================================================================
OSA-2019-010: SDC exposes JDWP outside of pod which allows for arbitrary code execution
=======================================================================================
diff --git a/osa/OSA-2019-011.rst b/osa/OSA-2019-011.rst
index 5749dab..b6289fa 100644
--- a/osa/OSA-2019-011.rst
+++ b/osa/OSA-2019-011.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=======================================================================================
OSA-2019-011: SDC exposes JDWP outside of pod which allows for arbitrary code execution
=======================================================================================
diff --git a/osa/OSA-2019-012.rst b/osa/OSA-2019-012.rst
index c48df68..f5863ae 100644
--- a/osa/OSA-2019-012.rst
+++ b/osa/OSA-2019-012.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=======================================================================================
OSA-2019-012: SDC exposes JDWP outside of pod which allows for arbitrary code execution
=======================================================================================
diff --git a/osa/OSA-2019-013.rst b/osa/OSA-2019-013.rst
index 7565c89..e05e584 100644
--- a/osa/OSA-2019-013.rst
+++ b/osa/OSA-2019-013.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=======================================================================================
OSA-2019-013: SDC exposes JDWP outside of pod which allows for arbitrary code execution
=======================================================================================
diff --git a/osa/OSA-2019-014.rst b/osa/OSA-2019-014.rst
index 0aef8ca..3f15312 100644
--- a/osa/OSA-2019-014.rst
+++ b/osa/OSA-2019-014.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=======================================================================================
OSA-2019-014: SDC exposes JDWP outside of pod which allows for arbitrary code execution
=======================================================================================
diff --git a/osa/OSA-2019-015.rst b/osa/OSA-2019-015.rst
index 4fb3002..2f87073 100644
--- a/osa/OSA-2019-015.rst
+++ b/osa/OSA-2019-015.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=============================================================================================================
OSA-2019-016: VNFSDK exposes JDWP port on localhost which allows to gain root privileges inside the container
=============================================================================================================
diff --git a/osa/OSA-2019-016.rst b/osa/OSA-2019-016.rst
index 808715a..ced588e 100644
--- a/osa/OSA-2019-016.rst
+++ b/osa/OSA-2019-016.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=================================================================
OSA-2019-016: ONAP Portal is vulnerable for Padding Oracle attack
=================================================================
diff --git a/osa/OSA-2019-017.rst b/osa/OSA-2019-017.rst
index ae79841..ca0ded5 100644
--- a/osa/OSA-2019-017.rst
+++ b/osa/OSA-2019-017.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
======================================================================================
OSA-2019-017: Some ONAP services allows to impersonate any user without authentication
======================================================================================
diff --git a/osa/OSA-2019-018.rst b/osa/OSA-2019-018.rst
index 8308f36..ac98c2f 100644
--- a/osa/OSA-2019-018.rst
+++ b/osa/OSA-2019-018.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
======================================
OSA-2019-018: SQL Injections in Portal
======================================
diff --git a/osa/OSA-2019-019.rst b/osa/OSA-2019-019.rst
index a54ae22..fe73f31 100644
--- a/osa/OSA-2019-019.rst
+++ b/osa/OSA-2019-019.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=================================================================================
OSA-2019-019: SDNC service allows for arbitrary code execution in sla/upload form
=================================================================================
diff --git a/osa/OSA-2019-020.rst b/osa/OSA-2019-020.rst
index 7860651..58b3c30 100644
--- a/osa/OSA-2019-020.rst
+++ b/osa/OSA-2019-020.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=============================================================
OSA-2019-020: Unprotected APIs/UIs exposed in Logging project
=============================================================
diff --git a/osa/OSA-2019-021.rst b/osa/OSA-2019-021.rst
index b7eccfa..2c2a18f 100644
--- a/osa/OSA-2019-021.rst
+++ b/osa/OSA-2019-021.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
==========================================================
OSA-2019-021: Unprotected APIs/UIs exposed in DCAE project
==========================================================
diff --git a/osa/OSA-2019-022.rst b/osa/OSA-2019-022.rst
index 7e8d721..7da630f 100644
--- a/osa/OSA-2019-022.rst
+++ b/osa/OSA-2019-022.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=========================================================
OSA-2019-022: Unprotected APIs/UIs exposed in OOM project
=========================================================
diff --git a/osa/OSA-2019-023.rst b/osa/OSA-2019-023.rst
index f6a773b..5b7d77e 100644
--- a/osa/OSA-2019-023.rst
+++ b/osa/OSA-2019-023.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
========================================================
OSA-2019-023: Unprotected APIs/UIs exposed in SO project
========================================================
diff --git a/osa/OSA-2019-024.rst b/osa/OSA-2019-024.rst
index 72ac197..3f7c67f 100644
--- a/osa/OSA-2019-024.rst
+++ b/osa/OSA-2019-024.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=========================================================
OSA-2019-024: Unprotected APIs/UIs exposed in MSB project
=========================================================
diff --git a/osa/OSA-2019-025.rst b/osa/OSA-2019-025.rst
index fef1f14..31c0867 100644
--- a/osa/OSA-2019-025.rst
+++ b/osa/OSA-2019-025.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
=========================================================
OSA-2019-025: Unprotected APIs/UIs exposed in CLI project
=========================================================
diff --git a/osa/OSA-2019-026.rst b/osa/OSA-2019-026.rst
index 78d40b6..4fe5e60 100644
--- a/osa/OSA-2019-026.rst
+++ b/osa/OSA-2019-026.rst
@@ -1,5 +1,6 @@
.. This work is licensed under a Creative Commons Attribution 4.0 International License.
.. Copyright 2019 Samsung Electronics
+
============================================================================
OSA-2019-026: AAF Secret Management Service allows to access all stored data
============================================================================