cvedb.io
CVE-2018-0041
CRITICAL · CVSS 9.8
EPSS exploitation probability: 0%
Published 2018-07-11T18:29:00.950 · Last modified 2026-06-17T01:29:27.510

Summary

Juniper Networks Contrail Service Orchestration releases prior to 3.3.0 use hardcoded credentials to access Keystone service. These credentials allow network based attackers unauthorized access to information stored in keystone.

Affected products

juniper — contrail_service_orchestration

Does this affect you?

Add your gear to cvedb and we'll alert you only when juniper ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.