14 matches found
CVE-2017-10617
CVE-2017-10616 & CVE-2017-10617 These two vulnerabilities affect Juniper Contrail version 2.2, 3.0, 3.1 and 3.2: Hard coded credentials CVE-2017-10616 XML External Entity CVE-2017-10617 Vendor security bulletin can be found at Juniper Security Alert JSA10819 2017-10. The vulnerable service in...
Juniper Networks’ Contrail Service Orchestration Privilege Escalation
The vulnerability of the Juniper Networks Contrail Service Orchestration software platform is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges and gain full control over the application...
Juniper Networks Contrail Service Orchestration REST API Disclosure
The vulnerability of the Juniper Networks Contrail Service Orchestration software is related to a failure in the protection mechanism of the REST API. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose the protected information...
Contrail messaging broker RabbitMQ DoS
The vulnerability of the Contrail messaging broker RabbitMQ on Juniper Networks’ Contrail Cloud platform is related to the use of pre-installed credentials. Exploiting this vulnerability could allow an attacker to cause service failures or gain access to sensitive information...
Juniper Networks’ Contrail Networking Service Data Unauthorized Access
The vulnerability of the Juniper Networks Contrail Networking software for building virtual networks is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
Juniper Networks Contrail Networking Information Disclosure Vulnerability
Juniper Networks Contrail Networking is Juniper Networks' software that provides dynamic end-to-end networking policy and control management for network virtualization and cloud management platforms. An information disclosure vulnerability exists in Juniper Networks Contrail Networking that could...
CVE-2021-0212
An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail...
Juniper Contrail Service Orchestration Unauthorized Access Vulnerability
Juniper Contrail Service Orchestration CSO is a Juniper Networks suite of products for designing and deploying network services in a centralized cloud CPE deployment model. An unauthorized access vulnerability exists in Juniper CSO versions prior to 4.0.0, which stems from the program's use of...
Juniper Contrail Service Orchestration Hard-Coded Credentials Vulnerability (CNVD-2019-19205)
Juniper Contrail Service Orchestration CSO is a Juniper Networks suite of products for designing and deploying network services in a centralized cloud CPE deployment model. A hard-coded credentials vulnerability exists in Juniper CSO versions prior to 4.0.0. The vulnerability stems from the fact...
CVE-2018-0040
Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services...
CVE-2018-0041
Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to information stored in keystone...
Juniper Contrail XML External Entity Injection Vulnerability
Juniper Contrail is a suite of cloud-based security solutions from Juniper Networks, Inc. The solution provides intelligent automation, application security and reliability for cloud and NFV. An XML external entity injection vulnerability exists in the ifmap service in Juniper Contrail. A remote...
Juniper Contrail Information Disclosure Vulnerability
Juniper Contrail is a suite of cloud-based security solutions from Juniper Networks, Inc. The solution provides intelligent automation, application security and reliability for cloud and NFV. A security vulnerability exists in the ifmap service in Juniper Contrail that stems from the program's us...
