What’s Vulnerable › Vulnerabilities
CVE-2018-0039: Contrail Service Orchestration: Hardcoded credentials for Grafana service
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.0% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-07-11 · updated 2026-06-17
- Weakness: CWE-561
Description
Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other weaknesses or vulnerabilities in Grafana.
Affected products
- Juniper Networks Contrail Service Orchestration: before 4.0.0 — fixed in 4.0.0
How to fix
Upgrade to a fixed version: Juniper Networks Contrail Service Orchestration 4.0.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2018-0039 or the next vulnerability affects your stack