What’s Vulnerable › Vulnerabilities
CVE-2018-0038
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-07-11 · updated 2026-06-17
- Weakness: CWE-798
Description
Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Cassandra.
Affected products
- Juniper Networks Contrail Service Orchestration: before 3.3.0 — fixed in 3.3.0
How to fix
Upgrade to a fixed version: Juniper Networks Contrail Service Orchestration 3.3.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2018-0038 or the next vulnerability affects your stack