CVE-2018-12357

Arista CloudVision Portal through 2018.1.1 has Incorrect Permissions...

CVE-2018-12357

Arista CloudVision Portal through 2018.1.1 has Incorrect Permissions...

Code injection

Arista CloudVision Portal through 2018.1.1 has Incorrect Permissions...

CVE-2018-12357

Arista CloudVision Portal through 2018.1.1 has Incorrect Permissions...

CVE-2018-12357

CVE-2018-12357 affects Arista CloudVision Portal up to version 2018.1.1, where an incorrect permissions issue could let an authenticated user with access to Account Management read/write access access sensitive information of other users. The Red Hat and Arista advisories confirm the vulnerabilit...

PT-2019-3016 · Google +10 · Golang.Org/X/Net/Http2 +11

Name of the Vulnerable Software and Affected Versions: HTTP/2 implementations affected versions not specified golang.org/x/net/http2 affected versions not specified Arista’s EOS affected versions not specified Arista’s CloudVision Portal affected versions not specified Access Points with OpenConf...

PT-2019-3472 · Apache +16 · Apache Traffic Server +30

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions affected versions not specified H2O versions affected versions not specified Node.js versions affected versions not specified SwiftNIO versions affected versions not specified Arista EOS versions affected versio...

Security Advisory 0039

Security Advisory 0039 PDF Date: January 16th, 2019 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | January 16th, 2019 | Initial Release The CVE-IDs tracking this issue are CVE-2018-16873, CVE-2018-16874 and CVE-2018-16875 Description This advisory is to document the impact of...

Security Advisory 0037

Security Advisory 0037 . CSAF PDF Date: August 14th, 2018 Last Updated: March 25th, 2019 Version: 1.1 Revision | Date | Changes ---|---|--- 1.0 | August 14, 2018 | Initial Release 1.1 | March 25, 2019 | Updated with Remediated versions The CVE-ID tracking this issue is CVE-2018-5391 CVSS v2: 7.8...

Security Advisory 0035

Security Advisory 0035 . CSAF PDF Date: July 3, 2018 Version: 1.0 Revision | Date | Changes ---|---|--- 1.0 | July 3, 2018 | Initial Release Arista CloudVision Portal Incorrect Permissions Vulnerability - CVE-2018-12357 CVSS v3: 6.5 AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N This advisory is to document...

PT-2018-1834 · Palo Alto Networks +9 · Pan-Os +12

Name of the Vulnerable Software and Affected Versions: Linux kernel versions 3.9 and later PAN-OS versions prior to 6.1.22 PAN-OS versions prior to 7.1.20 PAN-OS versions prior to 8.0.13 PAN-OS versions prior to 8.1.5 Arista EOS affected versions not specified vEOS affected versions not specified...

Arista Networks EOS Multiple Vulnerabilities (SA0018) (DROWN)

The version of Arista Networks EOS running on the remote device is affected by multiple vulnerabilities in the included OpenSSL library : - A cipher algorithm downgrade vulnerability exists due to a flaw that is triggered when handling cipher negotiation. A remote attacker can exploit this to...

Security Advisory 0031

Security Advisory 0031 PDF Date: January 3rd, 2018 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | January 3rd, 2018 | Initial Release 1.1 | January 8th, 2018 | Updated description with expanded analysis Arista Products vulnerability report for the following CVEs: Spectre CVE-2017-5753:...

Security Advisory 0030

Security Advisory 0030 PDF Date: October 2nd, 2017 Version: 1.0 Revision| Date| Changes ---|---|--- 1.0 | October 2nd, 2017 | Public release 1.1 | October 3rd, 2017 | Updates to clarify impact and add mitigation 1.2 | October 6th, 2017 | Updates to the affected software release table 1.3 | Octobe...

In the picture, the added noise will be able to fool Google's best image recognition AI-vulnerability warning-the black bar safety net

! Recently, a group from the University of Washington, network security lab NSL's computer experts found that a malicious attacker can trick Google's CloudVision API, this will cause the API to the user-submitted images were incorrectly classified. In recent years, based on the AI of the image...

CVE-2016-9012

CloudVision Portal CVP before 2016.1.2.1 allows remote authenticated users to gain access to the internal configuration mechanisms via the management plane, related to a request to /web/system/console/bundle...

CVE-2016-9012

CloudVision Portal CVP before 2016.1.2.1 allows remote authenticated users to gain access to the internal configuration mechanisms via the management plane, related to a request to /web/system/console/bundle...

Cross site request forgery (csrf)

CloudVision Portal CVP before 2016.1.2.1 allows remote authenticated users to gain access to the internal configuration mechanisms via the management plane, related to a request to /web/system/console/bundle...

CVE-2016-9012

CloudVision Portal CVP before 2016.1.2.1 allows remote authenticated users to gain access to the internal configuration mechanisms via the management plane, related to a request to /web/system/console/bundle...

CVE-2016-9012

CVE-2016-9012 concerns Arista Networks CloudVision Portal (CVP) before 2016.1.2.1. The issue allows a remote authenticated user with access to the management plane to gain access to internal configuration mechanisms via the management interface, related to a request to /web/system/console/bundle....