CVE-2019-12121

An issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using the ONAPPORTAL/processSingleSignOn UserId field, an attacker is able to decrypt arbitrary information encrypted with the same symmetric key as UserId. All Portal setups are affected.

An issue was detected in ONAP Portal through Dublin. By executing a padding oracle attack using the ONAPPORTAL/processSingleSignOn UserId field, an attacker is able to decrypt arbitrary information encrypted with the same symmetric key as UserId. All Portal setups are affected.

Se detectó un problema en ONAP Portal hasta Dublin. Mediante la ejecución de un ataque de tipo padding oracle usando el campo UserId de ONAPPORTAL/processSingleSignOn, un atacante puede descifrar información arbitraria cifrada con la misma clave simétrica que el UserId. Todas las configuraciones de Portal están afectadas.