[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fKtR8vzq_rEY9MPERfT0MAMF9bTKA98ZVR33YnzoBnFA":3,"g5a-risk:CVE-2018-0039":118},{"success":4,"data":5,"meta":116},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":47,"epssPercentile":15,"epssTimeSeries":48,"severity":49,"affectedProducts":50,"affectedProductsCount":56,"references":57,"referencesCount":56,"weaknesses":63,"weaknessesCount":77,"isActivelyExploited":78,"cisaInfo":15,"otxData":15,"relatedBlogPosts":79,"seoMetadata":80,"configurations":105,"relatedVendorCves":114,"notableEvents":115},"CVE-2018-0039","What is CVE-2018-0039?","Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials allow network based attackers unauthorized access to information stored in Grafana or exploit other weaknesses or vulnerabilities in Grafana.","Juniper Networks Contrail Service Orchestration releases prior to 4.0.0 have Grafana service enabled by default with hardcoded credentials. These credentials...","2018-07-11T18:29:00.823","2019-10-09T23:31:03.673",9.8,"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":38,"CVSSMetricV40":15},null,[17,30],{"Source":18,"Type":19,"CVSSData":20,"ExploitabilityScore":28,"ImpactScore":29},"nvd@nist.gov","Primary",{"Version":21,"VectorString":13,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"3.0","NETWORK","LOW","NONE","UNCHANGED","HIGH","CRITICAL",3.9,5.9,{"Source":31,"Type":32,"CVSSData":33,"ExploitabilityScore":28,"ImpactScore":37},"sirt@juniper.net","Secondary",{"Version":21,"VectorString":34,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":24,"BaseScore":35,"BaseSeverity":36,"ExploitCodeMaturity":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"TemporalSeverity":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"ModifiedAttackVector":15,"ModifiedAttackComplexity":15,"ModifiedPrivilegesRequired":15,"ModifiedUserInteraction":15,"ModifiedScope":15,"ModifiedConfidentialityImpact":15,"ModifiedIntegrityImpact":15,"ModifiedAvailabilityImpact":15,"EnvironmentalScore":15,"EnvironmentalSeverity":15},"CVSS:3.0\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:L\u002FI:L\u002FA:N",6.5,"MEDIUM",2.5,[39],{"Source":18,"Type":19,"CVSSData":40,"BaseSeverity":26,"ExploitabilityScore":45,"ImpactScore":46,"ACInsufInfo":15,"ObtainAllPrivilege":15,"ObtainUserPrivilege":15,"ObtainOtherPrivilege":15,"UserInteractionRequired":15},{"Version":41,"VectorString":42,"AccessVector":22,"AccessComplexity":23,"Authentication":24,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":44,"BaseSeverity":15,"Exploitability":15,"RemediationLevel":15,"ReportConfidence":15,"TemporalScore":15,"CollateralDamagePotential":15,"TargetDistribution":15,"ConfidentialityRequirement":15,"IntegrityRequirement":15,"AvailabilityRequirement":15,"EnvironmentalScore":15},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",7.5,10,6.4,0.00973,[47,47,47,47,47,47,47],"Critical",[51],{"vendor":52,"product":53,"version":54,"criteria":55,"vulnerable":4},"juniper","contrail_service_orchestration","*","cpe:2.3:a:juniper:contrail_service_orchestration:*:*:*:*:*:*:*:*",1,[58],{"url":59,"source":60,"tags":61},"https:\u002F\u002Fkb.juniper.net\u002FJSA10872","Juniper",[62],"Vendor Advisory",[64,72],{"id":65,"name":66,"description":67,"extendedDescription":68,"status":69,"abstraction":70,"structure":71},"CWE-561","Dead Code","The product contains dead code, which can never be executed.","Dead code is code that can never be executed in a running program. The surrounding code makes it impossible for a section of code to ever be executed.","Draft","Base","Simple",{"id":73,"name":74,"description":75,"extendedDescription":76,"status":69,"abstraction":70,"structure":71},"CWE-798","Use of Hard-coded Credentials","The product contains hard-coded credentials, such as a password or cryptographic key.","There are two main variations:",2,false,[],{"title":81,"metaDescription":82,"keywords":83,"canonicalUrl":84,"structuredData":85},"What is CVE-2018-0039? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2018-0039, a critical severity cyber security vulnerability from 2018. Juniper Networks Contrail Service Orchestration releases...","CVE-2018-0039, CVE-2018-0039 vulnerability, CVE-2018-0039 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2018, CVSS score, exploit, patch, remediation, juniper security, contrail_service_orchestration vulnerability","\u002Fwhat-is\u002Fcve-2018-0039",{"@context":86,"@type":87,"headline":81,"description":82,"datePublished":10,"dateModified":11,"author":88,"publisher":92,"about":96,"mainEntityOfPage":100,"articleSection":103,"keywords":104},"https:\u002F\u002Fschema.org","TechArticle",{"@type":89,"name":90,"url":91},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":89,"name":90,"url":91,"logo":93},{"@type":94,"url":95},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":97,"name":6,"description":98,"additionalType":99},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":101,"@id":102},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2018-0039","Cybersecurity","CVE-2018-0039, CVE-2018-0039 vulnerability, CVE-2018-0039 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[106],{"Operator":15,"Negate":15,"Nodes":107},[108],{"Operator":109,"Negate":15,"CPEMatch":110},"OR",[111],{"Vulnerable":4,"Criteria":55,"MatchCriteriaID":112,"VersionStartExcluding":15,"VersionStartIncluding":15,"VersionEndExcluding":113,"VersionEndIncluding":15},"9CFD198E-6944-40D6-950F-713B916CDCB4","4.0.0",[],[],{"lastModified":11,"cacheTime":117,"version":41},1792255369875,{"score":119,"band":120,"action":121,"scoredAt":122},54,"Medium","Plan remediation","2026-10-16T06:44:31.107472+00:00"]