What’s Vulnerable › Products

Juniper Networks Contrail Service Orchestration vulnerabilities

7 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 0 published in the last 12 months.

Check whether your Juniper Networks Contrail Service Orchestration version is affected

Latest Juniper Networks Contrail Service Orchestration vulnerabilities

• CVE-2022-22189 — Contrail Service Orchestration: An authenticated local user may have their permissions elevated via the device via management interface without authentication (CVSS 7.8)
• CVE-2022-22152 — Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface (CVSS 6.5)
• CVE-2018-0042 — (CVSS 9.8)
• CVE-2018-0041 — Contrail Service Orchestration: Hardcoded credentials for Keystone service. (CVSS 9.8)
• CVE-2018-0040 — Contrail Service Orchestration: hardcoded cryptographic certificates and keys (CVSS 9.8)
• CVE-2018-0039 — Contrail Service Orchestration: Hardcoded credentials for Grafana service (CVSS 9.8)
• CVE-2018-0038 — (CVSS 9.8)