An issue was discovered in ONAP APPC before Dublin. By using an exposed unprotected Jolokia interface, an unauthenticated attacker can read or overwrite an arbitrary file. All APPC setups are affected.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Open_network_automation_platform | Onap | 3.0.0 (including) | 4.0.0 (excluding) |