Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a user's cookie may retrieve that user's password from the database. All Portal setups are affected.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ONAP Portal 安全漏洞
Vulnerability Description
ONAP Portal是ONAP项目的一款用于解析应用程序的可视化设计工具。 ONAP Portal Dublin及之前版本中存在安全漏洞，该漏洞源于不正确的访问控制。远程攻击者可通过调用ONAPPORTAL/portalApi/loggedinUser利用该漏洞获取敏感信息，从而对系统发起进一步攻击。
CVSS Information
N/A
Vulnerability Type
N/A