Vulmon
Telemetry Interface blamed for exposed gRPC passwords
Juniper Networks has issued an update after finding hardcoded credentials had been left in some of its datacenter switches. The exposed login, designated CVE-2019-0034, was found in the Junos Network Agent, a software tool used to manage sensors and other devices that monitor network performance. Specifically, hardcoded credentials were found in Google gRPC, a component used with the Junos Telemetry Interface. "Configuration files used by gRPC were found to contain hardcoded credentials that cou...