Contrail Service Orchestration (Juniper) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 31 known versions, newest CVE from 2022-04-14. Vendor: Juniper.

CVEs of Contrail Service Orchestration

• CVE-2022-22189 - CVSS 7.8 (high), 2022-04-14: An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their…
• CVE-2022-22152 - CVSS 7.7 (high), 2022-01-19: A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view…
• CVE-2018-0039 - CVSS 9.8 (critical), 2018-07-11: Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials…
• CVE-2018-0042 - CVSS 9.8 (critical), 2018-07-11: Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnerability.
• CVE-2018-0038 - CVSS 9.8 (critical), 2018-07-11: Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service enabled by default with hardcoded credentials. These…
• CVE-2018-0041 - CVSS 9.8 (critical), 2018-07-11: Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network…
• CVE-2018-0040 - CVSS 9.8 (critical), 2018-07-11: Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow…