CVE-2018-0039 — Contrail Service Orchestration: Hardcoded credentials for Grafana service

CVE-2018-0039

Contrail Service Orchestration: Hardcoded credentials for Grafana service PUBLISHED

Description (CNA)

Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other weaknesses or vulnerabilities in Grafana.

Affected (CNA)

Vendor / product	Versions
Juniper Networks / Contrail Service Orchestration	affected unspecified before 4.0.0

CWE

CWE-798, CWE-561

References

https://kb.juniper.net/JSA10872

ADP enrichment

CVE

No English description supplied.

https://kb.juniper.net/JSA10872