PT-2021-3728 · Juniper Networks · Juniper Networks Contrail Cloud

Published 2021-07-14 · Updated 2021-07-27 · CVE-2021-0279

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H

Name of the Vulnerable Software and Affected Versions Juniper Networks Contrail Cloud versions prior to 13.6.0

Description The issue is related to the use of hardcoded credentials in the RabbitMQ service, which is enabled by default. This service is used for coordinating operations and status information among Contrail services. An attacker with access to the administrative service for RabbitMQ, such as the GUI, can use these hardcoded credentials to cause a Denial of Service (DoS) or gain access to sensitive system information.

Recommendations For versions prior to 13.6.0, update to version 13.6.0 or later to resolve the issue. As a temporary workaround, consider disabling the RabbitMQ service or restricting access to its administrative interface until a patch is applied. Avoid using the hardcoded credentials in the RabbitMQ service to minimize the risk of exploitation.

Fix

Using Hardcoded Credentials

Weakness Enumeration

CWE-798

Related Identifiers

BDU:2021-03968

CVE-2021-0279

Affected Products

Juniper Networks Contrail Cloud

References · 8

• https://bdu.fstec.ru/vul/2021-03968 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2021-0279 · Security Note
• https://kb.juniper.net/JSA11183 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-0279 · Vendor Advisory
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11183&actp=METADATA · Note
• https://t.me/cvenotify/18203 · Telegram Post
• https://kb.juniper.net/InfoCenter/index?pagecontentidJSA11183catSIRT1actpLISTshowDraftfalse · Note
• https://kb.juniper.net/InfoCenter/index?page=content&id=JSA11183&actp=METADATA · Note