Description (CNA)
Insufficient validation in the Single Sign-On (SSO) login flow could allow a remote, unauthenticated attacker to craft a URL that, when clicked by a user, causes the identity provider (IdP) to deliver authentication material to an attacker-controlled URL instead of to CloudVision.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Arista Networks / CloudVision Portal | affected 2026.2.0; affected 2026.1.0 through 2026.1.2; affected 2025.3.0 through 2025.3.3; affected 2021.1.0 before 2025.3.0 |
CWE
CWE-601
References
ADP enrichment
No English description supplied.
No references supplied.