Juniper Contrail vulnerabilities

• juniper contrail service orchestration Contrail Service Orchestration: An authenticated local user may have their permissions elevated via the device via management interface without authentication CVE-2022-22189 7.3 HighApril 14, 2022
• juniper contrail service orchestration Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface CVE-2022-22152 7.7 HighJanuary 19, 2022
• juniper contrail cloud Contrail Cloud: Hardcoded credentials for RabbitMQ service CVE-2021-0279 8.6 HighJuly 15, 2021
• juniper contrail networking Contrail Networking: Administrator credentials are exposed in a plaintext file CVE-2021-0212 5.0 MediumJanuary 15, 2021
• juniper contrail service orchestration Juniper Networks CSO versions prior to 4.0.0 may log passwords in log files leading to an... CVE-2018-0042 9.8 CriticalJuly 11, 2018
• juniper contrail service orchestration Contrail Service Orchestration: Hardcoded credentials for Keystone service. CVE-2018-0041 9.8 CriticalJuly 11, 2018
• juniper contrail service orchestration Contrail Service Orchestration: hardcoded cryptographic certificates and keys CVE-2018-0040 9.8 CriticalJuly 11, 2018
• juniper contrail service orchestration Contrail Service Orchestration: Hardcoded credentials for Grafana service CVE-2018-0039 6.5 MediumJuly 11, 2018
• juniper contrail service orchestration Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 have Cassandra service... CVE-2018-0038 9.8 CriticalJuly 11, 2018
• juniper contrail Contrail: XML External Entity (XXE) vulnerability CVE-2017-10617 Public exploit 5.0 MediumOctober 13, 2017
• juniper contrail Contrail: hard coded credentials CVE-2017-10616 5.3 MediumOctober 13, 2017