summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorKrzysztof Opasiak <k.opasiak@samsung.com>2019-06-06 01:13:13 +0200
committerKrzysztof Opasiak <k.opasiak@samsung.com>2019-06-06 01:24:43 +0200
commit5ed5c26fe0d9a2803101498d7a500f206960632d (patch)
tree5439c76d00ede0b3a3159086d2f3efb51a1cde8e
parentf52d6888f342a8f4206823f141dc00d4227cf73b (diff)
Document OJSI-42 (CVE-201912123) vulnerability
Issue-ID: OJSI-42 Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com> Change-Id: I9f9a475c3926c4eb462070b16ade2a3a947fc33d Former-commit-id: 40bd3f09e43fa80097268230b5432e7a55b8b715
-rw-r--r--docs/release-notes.rst2
1 files changed, 2 insertions, 0 deletions
diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 40192add..bdafa1cb 100644
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -42,6 +42,8 @@ The full list of known issues in SDNC may be found in the ONAP Jira at <https://
- CVE-2019-12132 `OJSI-41 <https://jira.onap.org/browse/OJSI-41>`_ SDNC service allows for arbitrary code execution in sla/dgUpload form
Fixed temporarily by disabling admportal
+- CVE-2019-12123 `OJSI-42 <https://jira.onap.org/browse/OJSI-42>`_ SDNC service allows for arbitrary code execution in sla/printAsXml form
+ Fixed temporarily by disabling admportal
*Known Security Issues*