Advisories · Technology

Juniper Networks Contrail Service Orchestration.

Every CVE that names Juniper Networks Contrail Service Orchestration among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2022-22189 CVE record

CVSS 7.3 High

Contrail Service Orchestration: An authenticated local user may have their permissions elevated via the device via management interface without authentication
- Juniper Networks Contrail Service Orchestration
- Authentication bypass
- CWE-708
Not analysed yet 14 Apr 2022
CVE-2022-22152 CVE record

CVSS 7.7 High

Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface
- Juniper Networks Contrail Service Orchestration
- CWE-693
Not analysed yet 19 Jan 2022
CVE-2018-0041 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Contrail Service Orchestration: Hardcoded credentials for Keystone service.
- Juniper Networks Contrail Service Orchestration
- Hard-coded credentials
Not analysed yet 11 Jul 2018
CVE-2018-0040 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Contrail Service Orchestration: hardcoded cryptographic certificates and keys
- Juniper Networks Contrail Service Orchestration
- Hard-coded credentials
Not analysed yet 11 Jul 2018
CVE-2018-0039 CVE record

CVSS 6.5 Medium

Contrail Service Orchestration: Hardcoded credentials for Grafana service
- Juniper Networks Contrail Service Orchestration
- Hard-coded credentials
- CWE-561
Not analysed yet 11 Jul 2018