CVE-2018-0040
Contrail Service Orchestration: hardcoded cryptographic certificates and keys
- State
- Published
- Severity
- 9.8 Critical
- Published
- Jul 11, 2018
- Updated
- Sep 16, 2024
- Reserved
- Nov 16, 2017
Description
Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 9.8 Critical | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | juniper |
Weaknesses
- CWE-321 Use of Hard-coded Cryptographic Key
Affected Products
| Product | Versions |
|---|---|
Contrail Service OrchestrationJuniper Networks |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.