CVE-2018-0040 — Contrail Service Orchestration: hardcoded cryptographic certificates and keys

CVE-2018-0040

Contrail Service Orchestration: hardcoded cryptographic certificates and keys PUBLISHED

Description (CNA)

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services.

Affected (CNA)

Vendor / product	Versions
Juniper Networks / Contrail Service Orchestration	affected unspecified before 4.0.0

CWE

CWE-321

References

https://kb.juniper.net/JSA10872

ADP enrichment

CVE

No English description supplied.

https://kb.juniper.net/JSA10872