Lucene search
+L

3 matches found

osv_cve
osv_cve
•added 2021/10/21 5:15 p.m.•24 views

CVE-2021-28496

On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection BFD will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users on the devic...

6.5CVSS5.8AI score0.0043EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2021/10/21 4:41 p.m.•36 views

CVE-2021-28496 In Arista's EOS software affected releases, the shared secret profiles sensitive configuration might be leaked when displaying output over eAPI or other JSON outputs to authenticated users on the device.

On systems running Arista EOS and CloudEOS with the affected release version, when using shared secret profiles the password configured for use by BiDirectional Forwarding Detection BFD will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users on the devic...

5.7CVSS6.7AI score0.0043EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/10/19 12:00 a.m.•4 views

PT-2021-17872

Name of the Vulnerable Software and Affected Versions: Arista EOS and CloudEOS versions 4.22.x through 4.26.1 Description: The password configured for use by BiDirectional Forwarding Detection BFD will be leaked when displaying output over eAPI or other JSON outputs to other authenticated users o...

6.5CVSS0.0043EPSS
SaveExploits0References5
Rows per page
Query Builder