CVE-2018-0039CWE-561CWE-798

Contrail Service Orchestration: Hardcoded credentials for Grafana service

Medium · published July 11, 2018

CVSS v3.0
6.5
EPSS
1%
Percentile
61.4
In the wild
Unconfirmed
What it is

Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other weaknesses or vulnerabilities in Grafana.

The record
Technical detail
CVSS v3.0
6.5 · MEDIUM
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00973 · 61.4th percentile
Weaknesses
CWE-561 · Dead Code; CWE-798 · Use of Hard-coded Credentials
Published
2018-07-11T18:00Z
EPSS history
Timeline
  • 11 JUL 18:00Z
    Contrail Service Orchestration: Hardcoded credentials for Grafana service
    cvelistv5