Логотип exploitDog
bind:CVE-2022-22152
Консоль
Логотип exploitDog

exploitDog

bind:CVE-2022-22152

Количество 3

Количество 3

nvd логотип

CVE-2022-22152

около 4 лет назад

A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view confidential configuration details of another tenant on the same system. By utilizing the REST API, one tenant is able to obtain information on another tenant's firewall configuration and access control policies, as well as other sensitive information, exposing the tenant to reduced defense against malicious attacks or exploitation via additional undetermined vulnerabilities. This issue affects Juniper Networks Contrail Service Orchestration versions prior to 6.1.0 Patch 3.

CVSS3: 7.7
EPSS: Низкий
github логотип

GHSA-hv5p-2fm6-37xc

около 4 лет назад

A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view confidential configuration details of another tenant on the same system. By utilizing the REST API, one tenant is able to obtain information on another tenant's firewall configuration and access control policies, as well as other sensitive information, exposing the tenant to reduced defense against malicious attacks or exploitation via additional undetermined vulnerabilities. This issue affects Juniper Networks Contrail Service Orchestration versions prior to 6.1.0 Patch 3.

EPSS: Низкий
fstec логотип

BDU:2022-02663

около 4 лет назад

Уязвимость программной платформы Juniper Networks Contrail Service Orchestration, связанная с сбоем механизма защиты в REST API, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 7.7
EPSS: Низкий

Уязвимостей на страницу

Уязвимость
CVSS
EPSS
Опубликовано
nvd логотип
CVE-2022-22152

A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view confidential configuration details of another tenant on the same system. By utilizing the REST API, one tenant is able to obtain information on another tenant's firewall configuration and access control policies, as well as other sensitive information, exposing the tenant to reduced defense against malicious attacks or exploitation via additional undetermined vulnerabilities. This issue affects Juniper Networks Contrail Service Orchestration versions prior to 6.1.0 Patch 3.

CVSS3: 7.7
0%
Низкий
около 4 лет назад
github логотип
GHSA-hv5p-2fm6-37xc

A Protection Mechanism Failure vulnerability in the REST API of Juniper Networks Contrail Service Orchestration allows one tenant on the system to view confidential configuration details of another tenant on the same system. By utilizing the REST API, one tenant is able to obtain information on another tenant's firewall configuration and access control policies, as well as other sensitive information, exposing the tenant to reduced defense against malicious attacks or exploitation via additional undetermined vulnerabilities. This issue affects Juniper Networks Contrail Service Orchestration versions prior to 6.1.0 Patch 3.

0%
Низкий
около 4 лет назад
fstec логотип
BDU:2022-02663

Уязвимость программной платформы Juniper Networks Contrail Service Orchestration, связанная с сбоем механизма защиты в REST API, позволяющая нарушителю раскрыть защищаемую информацию

CVSS3: 7.7
0%
Низкий
около 4 лет назад

Уязвимостей на страницу