From: Krzysztof Opasiak <k.opasiak@samsung.com>
Date: Wed, 5 Jun 2019 23:13:13 +0000 (+0200)
Subject: Document OJSI-42 (CVE-201912123) vulnerability
X-Git-Tag: 1.6.1~19^2
X-Git-Url: https://gerrit.onap.org/r/gitweb?p=sdnc%2Foam.git;a=commitdiff_plain;h=5ed5c26fe0d9a2803101498d7a500f206960632d

Document OJSI-42 (CVE-201912123) vulnerability

Issue-ID: OJSI-42
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I9f9a475c3926c4eb462070b16ade2a3a947fc33d

Former-commit-id: 40bd3f09e43fa80097268230b5432e7a55b8b715
---

diff --git a/docs/release-notes.rst b/docs/release-notes.rst
index 40192add..bdafa1cb 100644
--- a/docs/release-notes.rst
+++ b/docs/release-notes.rst
@@ -42,6 +42,8 @@ The full list of known issues in SDNC may be found in the ONAP Jira at <https://
 
 - CVE-2019-12132 `OJSI-41 <https://jira.onap.org/browse/OJSI-41>`_ SDNC service allows for arbitrary code execution in sla/dgUpload form
   Fixed temporarily by disabling admportal
+- CVE-2019-12123 `OJSI-42 <https://jira.onap.org/browse/OJSI-42>`_ SDNC service allows for arbitrary code execution in sla/printAsXml form
+  Fixed temporarily by disabling admportal
 
 *Known Security Issues*