Hardcoded credentials

2018-07-1118:29:00

PRIOn knowledge base

www.prio-n.com

9.2 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.7%

JSON

Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other weaknesses or vulnerabilities in Grafana.

CPENameOperatorVersion
contrail_service_orchestrationlt4.0.0

CPE	Name	Operator	Version
	contrail_service_orchestration	lt	4.0.0

References

kb.juniper.net/JSA10872