Description (CNA)
An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects: Juniper Networks Contrail Service Orchestration 6.0.0 versions prior to 6.0.0 Patch v3 on On-premises installations. This issue does not affect Juniper Networks Contrail Service Orchestration On-premises versions prior to 6.0.0.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Juniper Networks / Contrail Service Orchestration | affected 6.0.0 before 6.0.0 Patch v3 |
| Juniper Networks / Contrail Service Orchestration | unaffected unspecified before 6.0.0 |
CWE
CWE-288, CWE-708
References
ADP enrichment
No English description supplied.