Описание
On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision as-a-Service.
EPSS
Процентиль: 25%
0.00088
Низкий
10 Critical
CVSS3
Дефекты
CWE-287
Связанные уязвимости
CVSS3: 10
github
9 месяцев назад
On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision as-a-Service.
EPSS
Процентиль: 25%
0.00088
Низкий
10 Critical
CVSS3
Дефекты
CWE-287