Juniper Networks Contrail vulnerabilities

• juniper contrail service orchestration Contrail Service Orchestration: An authenticated local user may have their permissions elevated via the device via management interface without authentication CVE-2022-22189 7.3 HighApril 14, 2022
• juniper contrail service orchestration Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface CVE-2022-22152 7.7 HighJanuary 19, 2022
• juniper contrail cloud Contrail Cloud: Hardcoded credentials for RabbitMQ service CVE-2021-0279 8.6 HighJuly 15, 2021
• juniper appformix, juniper networks contrail insights +1 more Contrail Insights: The REST API implementation allows an unauthenticated remote attacker to execute commands as root. CVE-2021-0265 8.1 HighApril 22, 2021
• juniper contrail networking Contrail Networking: Administrator credentials are exposed in a plaintext file CVE-2021-0212 5.0 MediumJanuary 15, 2021
• juniper contrail service orchestration Contrail Service Orchestration: Hardcoded credentials for Keystone service. CVE-2018-0041 9.8 CriticalJuly 11, 2018
• juniper contrail service orchestration Contrail Service Orchestration: hardcoded cryptographic certificates and keys CVE-2018-0040 9.8 CriticalJuly 11, 2018
• juniper contrail service orchestration Contrail Service Orchestration: Hardcoded credentials for Grafana service CVE-2018-0039 6.5 MediumJuly 11, 2018
• juniper contrail Contrail: XML External Entity (XXE) vulnerability CVE-2017-10617 Public exploit 5.0 MediumOctober 13, 2017
• juniper contrail Contrail: hard coded credentials CVE-2017-10616 5.3 MediumOctober 13, 2017