Contrail Service Orchestration: Hardcoded credentials for Keystone service.
CVE-2018-0041

9.8CRITICAL

Key Information:

Vendor
Juniper Networks
Status
Contrail Service Orchestration
Vendor
CVE Published:
11 July 2018

Badges

👾 Exploit Exists

Summary

Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to information stored in keystone.

Affected Version(s)

Contrail Service Orchestration < 3.3.0

References

https://kb.juniper.net/JSA10872
x_refsource_CONFIRM

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.