CVE-2021-0279
High
Description
Juniper Networks Contrail Cloud (CC) releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of RabbitMQ are used when coordinating operations and status information among Contrail services. An attacker with access to an administrative service for RabbitMQ (e.g. GUI), can use these hardcoded credentials to cause a Denial of Service (DoS) or have access to unspecified sensitive system information. This issue affects the Juniper Networks Contrail Cloud releases on versions prior to 13.6.0.
SeverityHigh
CVSS8.6
Exploit probability—
Product
Juniper Contrail Cloud
PublishedJul 15, 2021
First seenJul 15, 2021
Weakness typeCWE-798Hard-coded credentials
How to fix
Update
- juniper contrail_cloud13.6 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| juniper contrail_cloud | v < 13.6 | 13.6 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.