CVE-2016-9012: High severity Arista CloudVision Portal vulnerability
Published Jan 23, 2017
·Updated
CloudVision Portal (CVP) before 2016.1.2.1 allows remote authenticated users to gain access to the internal configuration mechanisms via the management plane, related to a request to /web/system/console/bundle.
Affected Software
1 affected component
Arista CloudVision Portal<=2016.1.2.0
Event History
Jan 23, 2017
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Data Sourced
via NVD·09:59 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2016-9012?
CVE-2016-9012 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2016-9012?
To fix CVE-2016-9012, upgrade to CloudVision Portal version 2016.1.2.1 or later.
3
What does CVE-2016-9012 exploit?
CVE-2016-9012 exploits a vulnerability that allows remote authenticated users to access internal configuration mechanisms.
4
Which versions of CloudVision Portal are affected by CVE-2016-9012?
CloudVision Portal versions prior to 2016.1.2.1 are affected by CVE-2016-9012.
5
Can CVE-2016-9012 be exploited remotely?
Yes, CVE-2016-9012 can be exploited by remote authenticated users.