CVE ID | Publié | Description | Score | Gravité |
---|---|---|---|---|
A vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for access, located on the CVP server, by accessing a specific API. | 6.5 |
Moyen |
||
In support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are used. | 7.5 |
Haute |
||
Arista CloudVision Portal through 2018.1.1 has Incorrect Permissions. | 6.5 |
Moyen |