Juniper Networks Contrail
2 CVEs affecting Juniper Networks Contrail. Latest disclosed: 2017-10-13. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2017-10616 | Medium | 5.3 | 2017-10-13 | The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to… |
CVE-2017-10617 | Medium | 5.0 | 2017-10-13 | The ifmap service that comes bundled with Contrail has an XML External Entity (XXE) vulnerability that may allow an attacker to retrieve sensitive system files… |