Skip to content
OpenAdvisories
Critical · 9.8 CVE-2018-0041 EUVD-2018-0865GHSA-2gw3-mxrj-jwhh

Contrail Service Orchestration: Hardcoded credentials for Keystone service.

Published Jul 11, 2018 · Updated Sep 16, 2024 · Assigned by juniper

Description

Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to information stored in keystone.

Affected products

VendorProductAffectedFixed
Juniper Networks Contrail Service Orchestration unspecified – < 3.3.0 3.3.0

References