Approved changes feed: RSS · Atom

cpe:2.3:a:juniper:contrail:3.1:*:*:*:*:*:*:*

part: a version: 3.1 update: *

VendorJuniper (e5b3b18f-e0e0-511d-8fa5-6b210c732f6e)
ProductContrail (5ff9faad-1456-586b-953a-9d16cd1e3652)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-10616 vulnerable 2026-06-08 05:08:36.133407 Contrail: hard coded credentials
MEDIUM (5.3)
The ifmap service that comes bundled with Juniper Networks Contrail releases uses hard coded credentials. Affected releases are Contrail releases 2.2 prior to 2.21.4; 3.0 prior to 3.0.3.4; 3.1 prior to 3.1.4.0; 3.2 prior to 3.2.5.0. CVE-2017-10616 and CVE-2017-10617 can be chained together and have a combined CVSSv3 score of 5.8 (CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N).
Published: 2017-10-13T17:00:00.000Z
Updated: 2024-09-17T04:19:11.053Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.