Document OJSI-101 vulnerability

Issue-ID: OJSI-101
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: Ib87725793f23876eb6df9ed6ef6dcf6acb6e36a9

diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index dafdf3c..6dfb77a 100644 (file)
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -109,6 +109,7 @@ Security Notes
 -  CVE-2019-12119 [`OJSI-80 <https://jira.onap.org/browse/OJSI-80>`__\ ] - demo-sdc-sdc-wfd-fe exposes JDWP on port 7000 which allows for arbitrary code execution
 -  [`OJSI-90 <https://jira.onap.org/browse/OJSI-90>`__\ ] - SDC exposes unprotected API for user creation
 -  [`OJSI-94 <https://jira.onap.org/browse/OJSI-94>`__\ ] - sdc-wfd-fe allows to impersonate any user by setting USER_ID
+-  [`OJSI-101 <https://jira.onap.org/browse/OJSI-101>`__\ ] - In default deployment SDC (sdc-be) exposes HTTP port 30205 outside of cluster.
 
 *Known Vulnerabilities in Used Modules*