Hi, in Jakarta the Portal module does not come up ...

You need to access directly to each UI. For example for SDC UI:

* Go to https://<<sdc_ip>>:<<sdc_port>/ with Google Chrome Dev
* Open Inspect and go to Application section
* On left column, open Cookies
* Add the following cookie key/value
*USER_ID cs0008* for designer role
*USER_ID demo* for admin role

This hack can be possible since SDC UI authentication mode is cookie based. So 
the attacker can override the cookie to force its request.

Thanks,

Aniello

--

-----------------------------------------------------------------
*TIM*
*Aniello Paolo Malinconico*
Chief Innovation & Partnership Office
Technology Innovation

*TIM S.p.A.*
Via G. Reiss Romoli, 274 – 10148 TORINO
email: [email protected]
Tim Official: *Facebook* ( https://www.facebook.com/TimOfficialPage ) - 
*Twitter* ( https://twitter.com/tim_official ) - *www.tim.it* ( 
http://www.tim.it/ )


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.
View/Reply Online (#24208): https://lists.onap.org/g/onap-discuss/message/24208
Mute This Topic: https://lists.onap.org/mt/93651953/21656
Mute #portal:https://lists.onap.org/g/onap-discuss/mutehashtag/portal
Mute #jakarta:https://lists.onap.org/g/onap-discuss/mutehashtag/jakarta
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub 
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-


Reply via email to