CVE-2024-8100 — On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be use…

CVE-2024-8100

On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision. PUBLISHED

Description (CNA)

On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision.

Affected (CNA)

Vendor / product	Versions
Arista Networks / CloudVision	affected 2024.3.0; affected 2024.0 through 2024.2; affected 2023.3.0 through 2023.3.1; affected 2023.0 through 2023.2; affected 2022; affected 2021; affected 2020; affected 2019; affected 2018

CWE

CWE-269

References

https://www.arista.com/en/support/advisories-notices/security-advisory/21316-security-advisory-0116

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.