CVE-2022-29071

MEDIUM

4.0

Beschreibung

This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vulnerability is that the CVP user login passwords might be leaked to other authenticated users.

CVE Details

CVSS v3.1 Bewertung4.0

SchweregradMEDIUM

CVSS VektorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

AngriffsvektorLOCAL

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht8/5/2022

Zuletzt geandert11/21/2024

Quellenvd

Honeypot-Sichtungen0

Betroffene Produkte

arista:cloudvision_portal

Schwachen (CWE)

CWE-200CWE-532

Referenzen

https://www.arista.com/en/support/advisories-notices/security-advisory/15865-security-advisory-0079(psirt@arista.com)

https://www.arista.com/en/support/advisories-notices/security-advisory/15865-security-advisory-0079(af854a3a-2127-422b-91ae-364da2661108)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.