Read the docs
TI-2021-00147 Aliases CVE-2021-0212GHSA-92rw-4752-77x9

Contrail Networking: Administrator credentials are exposed in a plaintext file

Priority LOW 23CWE-200Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
Required
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-200.

Summary

An Information Exposure vulnerability in Juniper Networks Contrail Networking allows a locally authenticated attacker able to read files to retrieve administrator credentials stored in plaintext thereby elevating their privileges over the system. This issue affects: Juniper Networks Contrail Networking versions prior to 1911.31.

Why it matters now

EPSS 0.00316 24th percentileScored 2026-11-07
Fix Fixed Contrail Networking (Juniper Networks): 1911.31

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
JuniperContrail Networkingbefore 1911.311911.31Patch availableCNA
  • Contrail Networking VendorJuniper Affected before 1911.31 Fixed in 1911.31 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:juniper:contrail_networking:*:*:*:*:*:*:*:*before 1911.31VulnerableJuniper
  • cpe:2.3:a:juniper:contrail_networking:*:*:*:*:*:*:*:* Versions before 1911.31 Vulnerable ·Juniper

Remediation

  • Fix · CNA Contrail Networking (Juniper Networks) Fixed in 1911.31

Timeline

  1. 2026-10-02 Threatist record created from CVE-2021-0212
  2. 2026-10-03 Alias added: GHSA-92rw-4752-77x9

References

Advisory 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences