X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=docs%2Frelease-notes.rst;h=56443f1bebb677b9cfe0d558e455e80cdabd1cd4;hb=a7b9337e3691f89d0b3f7e36ab73ef964476a655;hp=05f6edcc3fd2f94e4a04359c96ecd0a1ca6255d0;hpb=2b301f4adbdf0d3f5fff0da60430295a2c1bb896;p=sdnc%2Foam.git diff --git a/docs/release-notes.rst b/docs/release-notes.rst index 05f6edcc..56443f1b 100644 --- a/docs/release-notes.rst +++ b/docs/release-notes.rst @@ -48,6 +48,10 @@ The full list of known issues in SDNC may be found in the ONAP Jira at `_ SDNC exposes unprotected API for user creation Fixed temporarily by disabling admportal +- `OJSI-98 `_ In default deployment SDNC (sdnc-portal) exposes HTTP port 30201 outside of cluster. + Fixed temporarily by disabling admportal +- CVE-2019-12112 `OJSI-199 `_ SDNC service allows for arbitrary code execution in sla/upload form + Fixed temporarily by disabling admportal *Known Security Issues*