A vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for access, located on the CVP server, by accessing a specific API.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Cloudvision_portal | Arista | * | 2020.2.0 (excluding) |