GCVE - cpe:2.3:a:arista:cloudvision_portal:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:arista:cloudvision_portal:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Arista (`6527c28e-420f-5910-9f50-47683159f01a`)
Product	Cloudvision Portal (`8e4dcf3a-33d1-5b33-9883-4234ca176ec1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2026-31431`	vulnerable	2026-06-08 07:57:15.005788	crypto: algif_aead - Revert to operating out-of-place HIGH (7.8) In the Linux kernel, the following vulnerability has been resolved: crypto: algif_aead - Revert to operating out-of-place This mostly reverts commit 72548b093ee3 except for the copying of the associated data. There is no benefit in operating in-place in algif_aead since the source and destination come from different mappings. Get rid of all the complexity added for in-place operation and just copy the AD directly. Published: 2026-04-22T08:15:10.123Z Updated: 2026-07-15T01:09:17.579Z Open on db.gcve.eu Reference links https://git.kernel.org/stable/c/893d22e0135fa394db81df88697fba6032747667 https://git.kernel.org/stable/c/19d43105a97be0810edbda875f2cd03f30dc130c https://git.kernel.org/stable/c/961cfa271a918ad4ae452420e7c303149002875b https://git.kernel.org/stable/c/3115af9644c342b356f3f07a4dd1c8905cd9a6fc https://git.kernel.org/stable/c/8b88d99341f139e23bdeb1027a2a3ae10d341d82	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-24546`	vulnerable	2026-06-08 05:56:05.909875	Details available On affected versions of the CloudVision Portal improper access controls on the connection from devices to CloudVision could enable a malicious actor with network access to CloudVision to get broader access to telemetry and configuration data within the system than intended. This advisory impacts the Arista CloudVision Portal product when run on-premise. It does not impact CloudVision as-a-Service. Published: 2023-06-13T00:00:00.000Z Updated: 2025-01-06T15:36:36.113Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisory/17022-security-advisory-0083	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-29071`	vulnerable	2026-06-08 05:42:46.416687	This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vu ... MEDIUM (4) This advisory documents an internally found vulnerability in the on premises deployment model of Arista CloudVision Portal (CVP) where under a certain set of conditions, user passwords can be leaked in the Audit and System logs. The impact of this vulnerability is that the CVP user login passwords might be leaked to other authenticated users. Published: 2022-08-05T16:47:17.137Z Updated: 2026-06-02T14:06:37.357Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices/security-advisory/15865-security-advisory-0079	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-24333`	vulnerable	2026-06-08 05:22:32.797799	Details available A vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for access, located on the CVP server, by accessing a specific API. Published: 2020-09-22T14:50:02.000Z Updated: 2024-08-04T15:12:09.020Z Open on db.gcve.eu Reference links https://www.arista.com/en/support/advisories-notices https://www.arista.com/en/support/advisories-notices/security-advisories/11706-security-advisory-51	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13881`	vulnerable	2026-06-08 05:18:01.281945	Details available In support.c in pam_tacplus 1.3.8 through 1.5.1, the TACACS+ shared secret gets logged via syslog if the DEBUG loglevel and journald are used. Published: 2020-06-06T18:18:36.000Z Updated: 2024-08-04T12:32:14.180Z Open on db.gcve.eu Reference links https://github.com/kravietz/pam_tacplus/issues/149 https://github.com/kravietz/pam_tacplus/commit/4a9852c31c2fd0c0e72fbb689a586aabcfb11cb0 http://www.openwall.com/lists/oss-security/2020/06/08/1 https://lists.debian.org/debian-lts-announce/2020/06/msg00007.html https://www.arista.com/en/support/advisories-notices/security-advisories/11705-security-advisory-50	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-18615`	vulnerable	2026-06-08 05:13:11.696659	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-18181`	vulnerable	2026-06-08 05:13:10.967022	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-17596`	vulnerable	2026-06-08 05:13:10.793064	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-12357`	vulnerable	2026-06-08 05:10:41.392818	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2016-9012`	vulnerable	2026-06-08 05:08:22.394459	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.