Vulnerabilities (CVE)

Filtered by vendor Onap Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-12122 1 Onap 1 Open Network Automation Platform 2020-03-20 4.0 MEDIUM 6.5 MEDIUM
An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected.