Document OJSI-183 vulnerability

[sdnc/oam.git] / docs / release-notes.rst

diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 56443f1..ff22521 100644 (file)
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -55,6 +55,12 @@ The full list of known issues in SDNC may be found in the ONAP Jira at <https://
 
 *Known Security Issues*
 
+- `OJSI-34 <https://jira.onap.org/browse/OJSI-34>`_ Multiple SQL Injection issues in SDNC
+- `OJSI-99 <https://jira.onap.org/browse/OJSI-99>`_ In default deployment SDNC (sdnc) exposes HTTP port 30202 outside of cluster.
+- `OJSI-100 <https://jira.onap.org/browse/OJSI-100>`_ In default deployment SDNC (sdnc-dgbuilder) exposes HTTP port 30203 outside of cluster.
+- `OJSI-179 <https://jira.onap.org/browse/OJSI-179>`_ dev-sdnc-sdnc exposes JDWP on port 1830 which allows for arbitrary code execution
+- `OJSI-183 <https://jira.onap.org/browse/OJSI-183>`_ SDNC exposes ssh service on port 30208
+
 *Known Vulnerabilities in Used Modules*
 
 Quick Links: