An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects: Juniper Networks Contrail Service Orchestration 6.0.0 versions prior to 6.0.0 Patch v3 on On-premises installations. This issue does not affect Juniper Networks Contrail Service Orchestration On-premises versions prior to 6.0.0.
The product requires authentication, but the product has an alternate path or channel that does not require authentication.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Contrail_service_orchestration | Juniper | 6.0.0 (including) | 6.0.0 (including) |
| Contrail_service_orchestration | Juniper | 6.0.0-patch1 (including) | 6.0.0-patch1 (including) |
| Contrail_service_orchestration | Juniper | 6.0.0-patch2 (including) | 6.0.0-patch2 (including) |