CVE-2018-0040

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services.

Score

CVSS 3.0 9.8 Critical

Status

Modified - sirt@juniper.net

Published

2018-07-11

Last modified

2024-09-16

Weaknesses

CWE-321, CWE-798

Affected products

• Contrail Service Orchestration (Juniper)
• Contrail Service Orchestration (Juniper Networks)

References

• https://kb.juniper.net/JSA10872