X-Git-Url: https://gerrit.onap.org/r/gitweb?a=blobdiff_plain;f=docs%2Frelease-notes.rst;h=dc10400dfb276d6670650ef23834bda22d1f6ede;hb=25f7bae5721a1033707a987fe9d065444a733f7d;hp=37d8b3f50a18bcce1d27ca45aef34d1bcbb3a256;hpb=7cad1c69abd3c1dbd8665a4d2a5d43a6901ad8c0;p=oom.git diff --git a/docs/release-notes.rst b/docs/release-notes.rst index 37d8b3f50a..dc10400dfb 100644 --- a/docs/release-notes.rst +++ b/docs/release-notes.rst @@ -55,6 +55,7 @@ Summary * In default deployment OOM (consul-server-ui) exposes HTTP port 30270 outside of cluster. [`OJSI-134 `_] * Hard coded password used for all oom deployments [`OJSI-188 `_] +* CVE-2019-12127 - OOM exposes unprotected API/UI on port 30270 [`OJSI-202 `_] *Known Vulnerabilities in Used Modules*