VULNERABILITY INTELLIGENCE

CVE-2022-22189

CVSS score7.3 HIGH
EPSS probability0.23%
CISA KEVNot currently listed
Published2022-04-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects: Juniper Networks Contrail Service Orchestration 6.0.0 versions prior to 6.0.0 Patch v3 on On-premises installations. This issue does not affect Juniper Networks Contrail Service Orchestration On-premises versions prior to 6.0.0.

Weakness classification

  • sirt@juniper.net: CWE-288
  • nvd@nist.gov: NVD-CWE-Other

Primary references