CVE-2018-0041
Contrail Service Orchestration: Hardcoded credentials for Keystone service.
- State
- Published
- Severity
- 9.8 Critical
- Published
- Jul 11, 2018
- Updated
- Sep 16, 2024
- Reserved
- Nov 16, 2017
Description
Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to information stored in keystone.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.0 | 9.8 Critical | CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | juniper |
Weaknesses
- CWE-798 Use of Hard-coded Credentials.
Affected Products
| Product | Versions |
|---|---|
Contrail Service OrchestrationJuniper Networks |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.