Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Juniper Networks Contrail Service Orchestration 4.0.0 Clear all filters
TI-2018-00037 CVE-2018-0040 · GHSA-54pf-77jh-g9mf

Contrail Service Orchestration: hardcoded cryptographic certificates and keys

Priority MEDIUM 45

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01434 Published 2018-07-11 Fixed in 4.0.0 CWE-321