Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-06891
HistoryJan 19, 2022 - 12:00 a.m.

Juniper Networks Contrail Service Orchestration Access Control Error Vulnerability

2022-01-1900:00:00
China National Vulnerability Database
www.cnvd.org.cn
7

0.001 Low

EPSS

Percentile

28.4%

Juniper Networks Contrail Service Orchestration is a robust software platform from Juniper Networks USA, Inc. used to connect many enterprise and multi-tenant service provider solutions. Juniper Networks Contrail Service Orchestration suffers from an access control error vulnerability that stems from improper access restrictions in the product’s REST API. A remote attacker could exploit the vulnerability to view confidential configuration details of other tenants in the same system.

0.001 Low

EPSS

Percentile

28.4%

Related for CNVD-2022-06891