Improper Access Control in Arista CloudVision Portal

CVE-2024-11186

What is CVE-2024-11186?

The CloudVision Portal by Arista Networks suffers from an improper access control vulnerability, allowing authenticated users to perform unauthorized actions on managed EOS devices. This issue affects only the on-premise versions of the CloudVision Portal and poses significant risks by potentially granting users access to broader functionalities than intended. Users should take necessary measures to secure their systems and ensure compliance with security best practices to mitigate the impact of this vulnerability.

References