From: Dan Timoney <dtimoney@att.com>
Date: Fri, 7 Jun 2019 02:11:19 +0000 (+0000)
Subject: Merge "Document OJSI-41 (CVE-2019-12132) vulnerability"
X-Git-Tag: 1.6.1~20
X-Git-Url: https://gerrit.onap.org/r/gitweb?p=sdnc%2Foam.git;a=commitdiff_plain;h=2e6c39d128f675739bc6359301a653e1a1985f58;hp=3bb7991c162ab7fa0350ae0cbce93db464db8f37

Merge "Document OJSI-41 (CVE-2019-12132) vulnerability"

Former-commit-id: cb7bffceb87ca03c4055dbbe1c74e830670ddf79
---

diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index f4ea951a..40192add 100644
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -40,6 +40,9 @@ The full list of known issues in SDNC may be found in the ONAP Jira at <https://
 
 *Fixed Security Issues*
 
+- CVE-2019-12132 `OJSI-41 <https://jira.onap.org/browse/OJSI-41>`_ SDNC service allows for arbitrary code execution in sla/dgUpload form
+  Fixed temporarily by disabling admportal
+
 *Known Security Issues*
 
 *Known Vulnerabilities in Used Modules*
@@ -240,5 +243,3 @@ in release 1.2.1:
 
 **Other**
 	NA
-
-