From: Dan Timoney <dtimoney@att.com>
Date: Fri, 7 Jun 2019 02:11:30 +0000 (+0000)
Subject: Merge "Document OJSI-42 (CVE-201912123) vulnerability"
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=67dec3df13ada39362c8b45043ee9b4f18846cc3;hp=cb7bffceb87ca03c4055dbbe1c74e830670ddf79;p=sdnc%2Foam.git

Merge "Document OJSI-42 (CVE-201912123) vulnerability"
---

diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 40192add..bdafa1cb 100644
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -42,6 +42,8 @@ The full list of known issues in SDNC may be found in the ONAP Jira at <https://
 
 - CVE-2019-12132 `OJSI-41 <https://jira.onap.org/browse/OJSI-41>`_ SDNC service allows for arbitrary code execution in sla/dgUpload form
   Fixed temporarily by disabling admportal
+- CVE-2019-12123 `OJSI-42 <https://jira.onap.org/browse/OJSI-42>`_ SDNC service allows for arbitrary code execution in sla/printAsXml form
+  Fixed temporarily by disabling admportal
 
 *Known Security Issues*