Security Advisory
CVE-2019-12122
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
An issue was discovered in ONAP Portal through Dublin. By executing a call to ONAPPORTAL/portalApi/loggedinUser, an attacker who possesses a users cookie may retrieve that users password from the database. All Portal setups are affected.