CVE-2022-22189
published 2022-04-14CVE-2022-22189: An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their…
high7.8CVSS 3.1
AVLACLPRLUINSUCHIHAH
An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects: Juniper Networks Contrail Service Orchestration 6.0.0 versions prior to 6.0.0 Patch v3 on On-premises installations. This issue does not affect Juniper Networks Contrail Service Orchestration On-premises versions prior to 6.0.0.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| juniper | contrail | — | — |
| juniper | contrail_service_orchestration | — | — |
| juniper_networks | contrail_service_orchestration | >= 6.0.0 < 6.0.0 Patch v3 | 6.0.0 Patch v3 |