CVE-2017-10616

Contrail: hard coded credentials

Medium · published October 13, 2017

CVSS v3.1
5.3
EPSS
1%
Percentile
70.2
In the wild
Unconfirmed
What it is

The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and have a combined CVSSv3 score of 5.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01300 · 70.2th percentile
Published
2017-10-13T17:00Z
EPSS history
Timeline
  • 13 OCT 17:00Z
    Contrail: hard coded credentials
    cvelistv5