An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects: Juniper Networks Contrail Service Orchestration 6.0.0 versions prior to 6.0.0 Patch v3 on On-premises installations. This issue does not affect Juniper Networks Contrail Service Orchestration On-premises versions prior to 6.0.0.
References
Link | Resource |
---|---|
https://kb.juniper.net/JSA69498 | Permissions Required Vendor Advisory |
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: juniper
Published: 2022-04-13T00:00:00
Updated: 2022-04-14T15:50:49
Reserved: 2021-12-21T00:00:00
Link: CVE-2022-22189
JSON object: View
NVD Information
Status : Analyzed
Published: 2022-04-14T16:15:08.167
Modified: 2022-04-25T14:25:09.687
Link: CVE-2022-22189
JSON object: View
Redhat Information
No data.