juniper contrail service orchestration vulnerabilities and exploits

(subscribe to this query)

4

CVSSv2

A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view confidential configuration details of another tenant on the same system. By utilizing the REST API, one tenant is able to obtain...

Juniper Contrail Service Orchestration Juniper Contrail Service Orchestration 6.1.0

7.5

CVSSv2

Juniper Networks Contrail Service Orchestration releases before 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other weaknesses or vulnerabil...

Juniper Contrail Service Orchestration

7.5

CVSSv2

Juniper Networks Contrail Service Orchestration releases before 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to information stored in keystone.

Juniper Contrail Service Orchestration

7.5

CVSSv2

Juniper Networks Contrail Service Orchestration releases before 3.3.0 have Cassandra service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Cassandra.

Juniper Contrail Service Orchestration

10

CVSSv2

Juniper Networks Contrail Service Orchestrator versions before 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based malicious users to gain unauthorized access to services.

Juniper Contrail Service Orchestration

5

CVSSv2

Juniper Networks CSO versions before 4.0.0 may log passwords in log files leading to an information disclosure vulnerability.

Juniper Contrail Service Orchestration

7.2

CVSSv2

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. T...

Juniper Contrail Service Orchestration 6.0.0

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook