Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using the ONAPPORTAL/processSingleSignOn UserId field, an attacker is able to decrypt arbitrary information encrypted with the same symmetric key as UserId. All Portal setups are affected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ONAP Portal 安全漏洞
Vulnerability Description
ONAP Portal是ONAP项目的一款用于解析应用程序的可视化设计工具。 ONAP Portal 3.0.0及之后版本(4.0.0版本已修复)中存在安全漏洞。攻击者可利用该漏洞解密信息。
CVSS Information
N/A
Vulnerability Type
N/A