OSA-2019-016: VNFSDK exposes JDWP port on localhost which allows to gain root privileges inside the container
VNFSDK: El Alto and earlier
Radosław Żeszczuk from Samsung reported vulnerability in VNFSDK. By accessing port 8000 of demo-vnfsdk-vnfsdk on localhost an attacker who has access to this pod can gain root privileges. All OOM ONAP setups which includes VNFSDK are affected.
Radosław Żeszczuk from Samsung