The vulnerability of the control interface of Juniper Networks’ Contrail Service Orchestration allows a attacker to enhance their privileges and gain full control over the application.

The vulnerability of the Juniper Networks Contrail Service Orchestration software platform is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain full control over the application...

The vulnerability of the Juniper Networks Contrail Service Orchestration software lies in a failure of the protection mechanism in the REST API, which allows an attacker to disclose protected information.

The vulnerability of the Juniper Networks Contrail Service Orchestration software is related to a failure in the protection mechanism of the REST API. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...

The vulnerability of Contrail messaging broker RabbitMQ on Juniper Networks’ Contrail Cloud platform allows a attacker to cause a service failure or gain access to protected information.

The vulnerability of the Contrail messaging broker RabbitMQ on Juniper Networks’ Contrail Cloud platform is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to cause service failures or gain access to sensitive information...

The vulnerability of Juniper Networks’ Contrail Networking software for building virtual networks lies in the lack of protection for service data, which allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Juniper Networks Contrail Networking software for building virtual networks is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Juniper Networks Contrail Networking Information Disclosure Vulnerability

Juniper Networks Contrail Networking is Juniper Networks' software that provides dynamic end-to-end networking policy and control management for network virtualization and cloud management platforms. An information disclosure vulnerability exists in Juniper Networks Contrail Networking that could...

Juniper Contrail Service Orchestration Unauthorized Access Vulnerability

Juniper Contrail Service Orchestration CSO is a Juniper Networks suite of products for designing and deploying network services in a centralized cloud CPE deployment model. An unauthorized access vulnerability exists in Juniper CSO versions prior to 4.0.0, which stems from the program's use of...

Juniper Contrail Service Orchestration Hard-Coded Credentials Vulnerability (CNVD-2019-19205)

Juniper Contrail Service Orchestration CSO is a Juniper Networks suite of products for designing and deploying network services in a centralized cloud CPE deployment model. A hard-coded credentials vulnerability exists in Juniper CSO versions prior to 4.0.0. The vulnerability stems from the fact...

CVE-2018-0041

Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to information stored in keystone...

CVE-2018-0040

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services...

Juniper Contrail Information Disclosure Vulnerability

Juniper Contrail is a suite of cloud-based security solutions from Juniper Networks, Inc. The solution provides intelligent automation, application security and reliability for cloud and NFV. A security vulnerability exists in the ifmap service in Juniper Contrail that stems from the program's us...

Juniper Contrail XML External Entity Injection Vulnerability

Juniper Contrail is a suite of cloud-based security solutions from Juniper Networks, Inc. The solution provides intelligent automation, application security and reliability for cloud and NFV. An XML external entity injection vulnerability exists in the ifmap service in Juniper Contrail. A remote...

Exploit for Improper Restriction of XML External Entity Reference in Juniper Contrail

CVE-2017-10616 & CVE-2017-10617 These two vulnerabilities aff...