CVE-2022-22189

An Incorrect Ownership Assignment vulnerability in Juniper Networks Contrail Service Orchestration (CSO) allows a locally authenticated user to have their permissions elevated without authentication thereby taking control of the local system they are currently authenticated to. This issue affects: Juniper Networks Contrail Service Orchestration 6.0.0 versions prior to 6.0.0 Patch v3 on On-premises installations. This issue does not affect Juniper Networks Contrail Service Orchestration On-premises versions prior to 6.0.0.

• CWE-288
• CWE-708

• https://kb.juniper.net/JSA69498Permissions Required, Vendor Advisory
• https://kb.juniper.net/JSA69498Permissions Required, Vendor Advisory

Published

Apr 14, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22183An Improper Access Control vulnerability in Juniper Networks…7.5
• CVE-2022-22184An Improper Input Validation vulnerability in the Routing Pr…7.5
• CVE-2022-22185A vulnerability in Juniper Networks Junos OS on SRX Series, …7.5
• CVE-2022-22186Due to an Improper Initialization vulnerability in Juniper N…6.5
• CVE-2022-22187An Improper Privilege Management vulnerability in the Window…7.8
• CVE-2022-22188An Uncontrolled Memory Allocation vulnerability leading to a…7.5
• CVE-2022-2219The Unyson WordPress plugin before 2.7.27 does not sanitise …7.2
• CVE-2022-22190An Improper Access Control vulnerability in the Juniper Netw…7.5
• CVE-2022-22191A Denial of Service (DoS) vulnerability in the processing of…6.5
• CVE-2022-22192An Improper Validation of Syntactic Correctness of Input vul…7.5
• CVE-2022-22193An Improper Handling of Unexpected Data Type vulnerability i…5.5
• CVE-2022-22194An Improper Check for Unusual or Exceptional Conditions vuln…7.5