CVE-2024-11186 On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-prem

[
  {
    "defaultStatus": "unaffected",
    "product": "CloudVision Portal",
    "vendor": "Arista Networks",
    "versions": [
      {
        "status": "affected",
        "version": "2024.3.0"
      },
      {
        "lessThanOrEqual": "2024.2.1",
        "status": "affected",
        "version": "2024.2.0",
        "versionType": "custom"
      },
      {
        "lessThanOrEqual": "2024.1.2",
        "status": "affected",
        "version": "2024.1.0",
        "versionType": "custom"
      },
      {
        "status": "affected",
        "version": "2023.3"
      },
      {
        "status": "affected",
        "version": "2023.2"
      },
      {
        "status": "affected",
        "version": "2023.1"
      },
      {
        "status": "affected",
        "version": "2022.3"
      },
      {
        "status": "affected",
        "version": "2022.2"
      },
      {
        "status": "affected",
        "version": "2022.1"
      },
      {
        "status": "affected",
        "version": "2021.3"
      },
      {
        "status": "affected",
        "version": "2021.2"
      },
      {
        "status": "affected",
        "version": "2021.1"
      },
      {
        "status": "affected",
        "version": "2020.3"
      },
      {
        "status": "affected",
        "version": "2020.2"
      },
      {
        "status": "affected",
        "version": "2020.1"
      },
      {
        "status": "affected",
        "version": "2019.1"
      },
      {
        "status": "affected",
        "version": "2018.2"
      },
      {
        "status": "affected",
        "version": "2018.1"
      },
      {
        "status": "affected",
        "version": "2017.2"
      }
    ]
  }
]