Security Advisory

CVE-2022-22189

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2022-04-14 15:50:49
Last updated 2024-09-16 23:36:26
Assigner juniper
State PUBLISHED

Description

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects: Juniper Networks Contrail Service Orchestration 6.0.0 versions prior to 6.0.0 Patch v3 on On-premises installations. This issue does not affect Juniper Networks Contrail Service Orchestration On-premises versions prior to 6.0.0.