CVE-2018-0039: Contrail Service Orchestration: Hardcoded credentials for Grafana service
Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other weaknesses or vulnerabilities in Grafana.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2018-0039?
CVE-2018-0039 is categorized as a high-severity vulnerability due to its potential for unauthorized access to sensitive information.
How do I fix CVE-2018-0039?
To fix CVE-2018-0039, it is essential to upgrade to Juniper Networks Contrail Service Orchestration version 4.0.0 or later.
What systems are affected by CVE-2018-0039?
CVE-2018-0039 affects all versions of Juniper Networks Contrail Service Orchestration prior to 4.0.0.
What type of attack does CVE-2018-0039 enable?
CVE-2018-0039 enables network-based attackers to gain unauthorized access to information in Grafana due to hardcoded credentials.
Are there any workarounds for CVE-2018-0039?
A temporary workaround for CVE-2018-0039 involves disabling the Grafana service, but upgrading is the recommended solution.