CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.1. See the original NVD description below for full technical details.
CVE
CVE-2019-12131
Severity
CRITICAL
CVSS
9.1
EPSS
1.18%
Original NVD Description
An issue was detected in ONAP APPC through Dublin and SDC through Dublin. By setting a USER_ID parameter in an HTTP header, an attacker may impersonate an arbitrary existing user without any authentication. All APPC and SDC setups are affected.
Related CVEs
Other vulnerabilities affecting the same vendor(s)