Skip to content
CVE PROGRAM SOURCE RECORD8.7 High

CVE-2024-8100

On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision.

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Arista

Description

On affected versions of the Arista CloudVision Portal (CVP on-prem), the time-bound device onboarding token can be used to gain admin privileges on CloudVision.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arista Networks CloudVision

Default version status: unaffected

  • 2024.3.0affected
  • 2024.0 to ≤ 2024.2affected
  • 2023.3.0 to ≤ 2023.3.1affected
  • 2023.0 to ≤ 2023.2affected
  • 2022affected
  • 2021affected
  • 2020affected
  • 2019affected
  • 2018affected

References