← CVE Intelligence

CVE-2024-11186

On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-prem PUBLISHED

Description (CNA)

On affected versions of the CloudVision Portal, improper access controls could enable a malicious authenticated user to take broader actions on managed EOS devices than intended. This advisory impacts the Arista CloudVision Portal products when run on-premise. It does not impact CloudVision as-a-Service.

Affected (CNA)

Vendor / productVersions
Arista Networks / CloudVision Portalaffected 2024.3.0; affected 2024.2.0 through 2024.2.1; affected 2024.1.0 through 2024.1.2; affected 2023.3; affected 2023.2; affected 2023.1; affected 2022.3; affected 2022.2; affected 2022.1; affected 2021.3; affected 2021.2; affected 2021.1; affected 2020.3; affected 2020.2; affected 2020.1; affected 2019.1; affected 2018.2; affected 2018.1; affected 2017.2

CWE

CWE-287

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.