CVE ID | Published | Description | Score | Severity |
---|---|---|---|---|
A vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for access, located on the CVP server, by accessing a specific API. | 6.5 |
Medium |
||
In support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are used. | 7.5 |
High |
||
Arista CloudVision Portal through 2018.1.1 has Incorrect Permissions. | 6.5 |
Medium |