157 matches found
CVE-2020-24333
A vulnerability in Arista’s CloudVision Portal CVP prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for access, located on the CVP server, by accessing a specific API...
CVE-2020-24333
A vulnerability in Arista’s CloudVision Portal CVP prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for access, located on the CVP server, by accessing a specific API...
Design/Logic Flaw
A vulnerability in Arista’s CloudVision Portal CVP prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for access, located on the CVP server, by accessing a specific API...
CVE-2020-24333
A vulnerability in Arista’s CloudVision Portal CVP prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for access, located on the CVP server, by accessing a specific API...
CVE-2020-24333
The CVE-2020-24333 issue affects Arista’s CloudVision Portal (CVP) prior to 2020.2, where users with read-only or higher access to the Configlet Management module can download files not intended for access via a specific API. The vulnerability’s impact is the exposure of server-hosted files to au...
Security Advisory 0050
Security Advisory 0050 PDF Date: September 9th, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | September 9th, 2020 | Initial Release The CVE-ID tracking this issue is: CVE-2020-13881 CVSSv3.1 Base Score: 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N Description This advisory...
Security Advisory 0051
Security Advisory 0051 PDF Date: September 9th, 2020 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | September 9th, 2020 | Initial Release The CVE-ID tracking this issue is: CVE-2020-24333 CVSSv3.1 Base Score: 6.5 CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H Description This advisory...
Arista Networks Networks CloudVision Portal IP fragment DoS (SA0037)
The version of Arista Networks CloudVision Portal running on the remote device is affected by a denial of service DoS vulnerability. The Linux kernel is vulnerable to a DoS attack with low rates of specially modified packets targeting IP fragment re-assembly. An remote, unauthenticated attacker c...
Arista Networks CloudVision Portal Multiple Vulnerabilities (SA0043)
The version of Arista Networks CloudVision Portal running on the remote device is affected by the following vulnerabilities: - HTTP/2 implementations are vulnerable to ping floods, potentially leading to a denial of service DoS. An unauthenticated, remote attacker can exploit this, by sending...
Arista Networks CloudVision Portal Incorrect Permissions (SA0035)
The version of Arista Networks CloudVision Portal running on the remote device is affected by an incorrect permissions vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. To retrieve patch level information...
Arista Networks CloudVision Portal Linux Kernel TCP Multiple DoS (SA0041)
The version of Arista Networks CloudVision Portal running on the remote device is affected by the following denial of service DoS vulnerabilities related to TCP networking in the Linux kernel, which can be exploited by a remote, unauthenticated attacker: - SACK Panic. The TCPSKBCBskb-tcpgsosegs...
Arista Networks CloudVision Portal DoS (SA0036)
The version of Arista Networks CloudVision Portal running on the remote device is affected by a denial of service DoS vulnerability where the Linux kernel is forced to make expensive calls to tcpcollapseofoqueue and tcppruneofoqueue for every incoming packet. Note that Nessus has not tested for...
Arista Networks CloudVision Portal Privilege Escalation (SA0044)
The version of Arista Networks CloudVision Portal running on the remote device is affected by a privilege escalation vulnerability. Users with read-only permissions can exploit this to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This...
Arista Networks CloudVision Portal Password Exposure (SA0045)
The version of Arista Networks CloudVision Portal running on the remote device is affected by an information disclosure vulnerability. Under certain conditions, the application logs user passwords in plain text for certain API calls, potentially leading to user password exposure. Note that Nessus...
Arista CloudVision Portal Web Detection
Binary data aristacloudvisionportaldetect.nbin...
Arista Networks CloudVision Portal Memory Corruption Vulnerability
Arista Networks CloudVision Portal is a suite of web-based user management portals for the CloudVision platform from Arista Networks, USA. The product includes features such as network device configuration, compliance management, change management, and network monitoring and management. A securit...
Arista Networks CloudVision Portal Privilege Vulnerability
Arista Networks CloudVision Portal is a suite of web-based user management portals for the CloudVision platform from Arista Networks, USA. The product includes features such as network device configuration, compliance management, change management, and network monitoring and management. A...
CVE-2019-18181
In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only...
CVE-2019-18181
In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only...
Design/Logic Flaw
In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only...