01 Record index
Contrail Cloud: Hardcoded credentials for RabbitMQ service
Contrail Cloud: Hardcoded credentials for RabbitMQ service
Exploit-prediction scores from FIRST. Independent scoring and analysis status from the NVD. Vendor severity from Red Hat. Exploitation assessment and catalog membership from CISA.
The following software releases have been updated to resolve this specific issue: Juniper Networks Contrail Cloud version 13.6.0, and all subsequent releases. When installing Contrail Cloud version 13.6.0, to set a non-default password for RabbitMQ, one of these options are possible: a) You may set a non-default password using the config/vault-data.yml file. b) Or following configuration should be added to the CC site.yml file: extra_config: ContrailAnalyticsParameters: ContrailSettings: RABBITMQ_PASSWORD: "{{ vault['other']['credentials']['contrail_rabbit']['password'] }}" RABBITMQ_USER: "{{ vault['other']['credentials']['contrail_rabbit']['user'] }}" ContrailControllerParameters: ContrailSettings: RABBITMQ_PASSWORD: "{{ vault['other']['credentials']['contrail_rabbit']['password'] }}" RABBITMQ_USER: "{{ vault['other']['credentials']['contrail_rabbit']['user'] }}" Contact Juniper Networks Technical Assistance Center (JTAC) for guided assistance if necessary.