Document OJSI-98 vulnerability

[sdnc/oam.git] / docs / release-notes.rst

diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index fa83868..67034c6 100644 (file)
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -46,6 +46,10 @@ The full list of known issues in SDNC may be found in the ONAP Jira at <https://
   Fixed temporarily by disabling admportal
 - CVE-2019-12113 `OJSI-43 <https://jira.onap.org/browse/OJSI-43>`_ SDNC service allows for arbitrary code execution in sla/printAsGv form
   Fixed temporarily by disabling admportal
+- `OJSI-91 <https://jira.onap.org/browse/OJSI-91>`_ SDNC exposes unprotected API for user creation
+  Fixed temporarily by disabling admportal
+- `OJSI-98 <https://jira.onap.org/browse/OJSI-98>`_ In default deployment SDNC (sdnc-portal) exposes HTTP port 30201 outside of cluster.
+  Fixed temporarily by disabling admportal
 
 *Known Security Issues*