From: Krzysztof Opasiak <k.opasiak@samsung.com>
Date: Wed, 5 Jun 2019 00:08:05 +0000 (+0200)
Subject: Document OJSI-77 (CVE-2019-12116) vulnerability
X-Git-Tag: 1.6.1~331
X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F08%2F89308%2F1;p=sdc.git

Document OJSI-77 (CVE-2019-12116) vulnerability

Issue-ID: OJSI-77
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I4a1f92491cc0792659493cecc73575aba4100116
---

diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 1cdd7f4a43..84947c6f83 100644
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -103,6 +103,7 @@ Security Notes
 
 -  [`OJSI-31 <https://jira.onap.org/browse/OJSI-31>`__\ ] - Unsecured Swagger UI Interface in sdc-wfd-be
 -  CVE-2019-12115 [`OJSI-76 <https://jira.onap.org/browse/OJSI-76>`__\ ] - demo-sdc-sdc-be exposes JDWP on port 4000 which allows for arbitrary code execution
+-  CVE-2019-12116 [`OJSI-77 <https://jira.onap.org/browse/OJSI-77>`__\ ] - demo-sdc-sdc-fe exposes JDWP on port 6000 which allows for arbitrary code execution
 
 *Known Vulnerabilities in Used Modules*