Juniper
Juniper Contrail Service Orchestration: vulnerabilidades y CVE
Juniper Contrail Service Orchestration tiene 7 vulnerabilidades publicadas, 0 de ellas en los últimos 12 meses. 5 son críticas y 0 figuran en el catálogo de explotación activa de CISA.
CVE7
Últimos 12 meses0
Críticas5
Explotadas activamente0
Todas las vulnerabilidades en el catálogo →⭐ Seguir esta tecnología
Últimas vulnerabilidades
| CVE | Severidad | EPSS | Explotación activa | Publicada | Descripción |
|---|---|---|---|---|---|
| CVE-2022-22189 | Alta (7.8) | 0.23% | — | 14 abr 2022 | An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their permissions elevated without authentication thereby taking… |
| CVE-2022-22152 | Media (6.5) | 0.78% | — | 19 ene 2022 | A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view confidential configuration details of another tenant on the same… |
| CVE-2018-0042 | Crítica (9.8) | 1.1% | — | 11 jul 2018 | Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an information disclosure vulnerability. |
| CVE-2018-0041 | Crítica (9.8) | 1.1% | — | 11 jul 2018 | Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to information stored in… |
| CVE-2018-0040 | Crítica (9.8) | 1.4% | — | 11 jul 2018 | Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services. |
| CVE-2018-0039 | Crítica (9.8) | 0.97% | — | 11 jul 2018 | Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to… |
| CVE-2018-0038 | Crítica (9.8) | 1.1% | — | 11 jul 2018 | Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to… |