CVE-2019-18181

Name of the Vulnerable Software and Affected Versions CloudVision Portal versions 2018.1 through 2018.2

Description The issue allows users with read-only permissions to bypass restrictions for certain functionality through API calls in the Configlet Builder modules. This can enable authenticated users with read-only access to perform actions that are otherwise restricted in the graphical user interface.

Recommendations For CloudVision Portal versions 2018.1 through 2018.2, consider restricting access to the Configlet Builder modules until a fix is available. As a temporary workaround, limit the use of CVP API calls to minimize the risk of exploitation.