VDB
CVE-2021-0279
CVE-2021-0279
PUBLISHED
CVSS 8.600000381469727 HIGH
Juniper Networks Contrail Cloud (CC) releases prior to 13.6.0 have RabbitMQ service enabled by default with hardcoded credentials. The messaging services of RabbitMQ are used when coordinating operations and status information among Contrail services. An attacker with access to an administrative service for RabbitMQ (e.g. GUI), can use these hardcoded credentials to cause a Denial of Service (DoS) or have access to unspecified sensitive system information. This issue affects the Juniper Networks Contrail Cloud releases on versions prior to 13.6.0.
EPSS 0.31% · 54.6th percentile
Risk Scores
CVSS 3.1
8.600000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
EPSS Score
0.31%
54.6th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Juniper Networks | Contrail Cloud | unspecified |
| juniper | contrail_cloud | 0 |
Exploit Intelligence
- https://kb.juniper.net/JSA11183 (circl)
Timeline
- Jul 15, 2021 CVE Published
- Jul 16, 2021 EPSS Score
- Sep 14, 2021 EPSS Score
- Nov 12, 2021 EPSS Score
- Jan 6, 2022 EPSS Score
- Feb 4, 2022 EPSS Score
- Mar 11, 2022 EPSS Score
- Apr 1, 2022 EPSS Score
- May 10, 2022 EPSS Score
- Jul 9, 2022 EPSS Score
- Sep 7, 2022 EPSS Score
- Nov 6, 2022 EPSS Score