An issue in ETSI Open-Source MANO (OSM) v.14.x, v.15.x allows a remote attacker to escalate privileges via not imposing any restrictions on the authentication attempts performed by an admin user
https://www.osmium.solutions/articles/osm-mano-vulnerability-discovery.html#2