What’s Vulnerable › Vulnerabilities
CVE-2018-0041: Contrail Service Orchestration: Hardcoded credentials for Keystone service.
- Severity: critical (CVSS 9.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 1.1% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2018-07-11 · updated 2026-06-17
- Weakness: CWE-798
Description
Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to information stored in keystone.
Affected products
- Juniper Networks Contrail Service Orchestration: before 3.3.0 — fixed in 3.3.0
How to fix
Upgrade to a fixed version: Juniper Networks Contrail Service Orchestration 3.3.0. Check the vendor advisory for mitigations.
References
Get alerted when CVE-2018-0041 or the next vulnerability affects your stack