VULNERABILITY INTELLIGENCE

CVE-2018-0040

CVSS score9.8 CRITICAL
EPSS probability1.43%
CISA KEVNot currently listed
Published2018-07-11
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Juniper Networks Contrail Service Orchestrator versions prior to 4.0.0 use hardcoded cryptographic certificates and keys in some cases, which may allow network based attackers to gain unauthorized access to services.

Weakness classification

  • CWE-321: Use of Hard-coded Cryptographic Key
  • CWE-798: Use of Hard-coded Credentials

Primary references