CVE-2023-24546

Name of the Vulnerable Software and Affected Versions Arista CloudVision Portal (affected versions not specified)

Description The issue is related to improper access controls on the connection from devices to CloudVision, which could allow a malicious actor with network access to CloudVision to gain broader access to telemetry and configuration data within the system than intended. This affects the Arista CloudVision Portal product when run on-premise, but does not impact CloudVision as-a-Service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.