What is the severity of CVE-2019-18615?

The severity of CVE-2019-18615 is considered high due to the potential exposure of user passwords.

How do I fix CVE-2019-18615?

To fix CVE-2019-18615, update the CloudVision Portal to a version later than 2018.2.3 that addresses this vulnerability.

What systems are affected by CVE-2019-18615?

CVE-2019-18615 affects all releases in the 2018.2 Train of the Arista CloudVision Portal when enable mode passwords are configured.

Can CVE-2019-18615 lead to data breaches?

Yes, CVE-2019-18615 can lead to data breaches as it may allow unauthorized access to user passwords stored in plain text.

Is CVE-2019-18615 a privileged user vulnerability?

Yes, CVE-2019-18615 primarily affects instances where privileged users make certain API calls that log passwords.

Vulnerability/
CVE-2019-18615

medium

4.9

CWE

312 522

19/12/2019

5/8/2024

CVE-2019-18615

First published: Thu Dec 19 2019(Updated: )

In CloudVision Portal (CVP) for all releases in the 2018.2 Train, under certain conditions, the application logs user passwords in plain text for certain API calls, potentially leading to user password exposure. This only affects CVP environments where: 1. Devices have enable mode passwords which are different from the user's login password, OR 2. There are configlet builders that use the Device class and specify username and password explicitly Application logs are not accessible or visible from the CVP GUI. Application logs can only be read by authorized users with privileged access to the VM hosting the CVP application.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Arista CloudVision Portal	>=2018.2.0<=2018.2.3

Never miss a vulnerability like this again

Reference Links

https://www.arista.com/en/support/advisories-notices/security-advisories/9002-security-advisory-45

Frequently Asked Questions

What is the severity of CVE-2019-18615?
The severity of CVE-2019-18615 is considered high due to the potential exposure of user passwords.
How do I fix CVE-2019-18615?
To fix CVE-2019-18615, update the CloudVision Portal to a version later than 2018.2.3 that addresses this vulnerability.
What systems are affected by CVE-2019-18615?
CVE-2019-18615 affects all releases in the 2018.2 Train of the Arista CloudVision Portal when enable mode passwords are configured.
Can CVE-2019-18615 lead to data breaches?
Yes, CVE-2019-18615 can lead to data breaches as it may allow unauthorized access to user passwords stored in plain text.
Is CVE-2019-18615 a privileged user vulnerability?
Yes, CVE-2019-18615 primarily affects instances where privileged users make certain API calls that log passwords.

collector/nvd-index
agent/weakness
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/severity
agent/author
agent/last-modified-date
agent/references
agent/description
agent/event
agent/tags
agent/first-publish-date
agent/source
vendor/arista
canonical/arista cloudvision portal
version/arista cloudvision portal/2018.2.0
version/arista cloudvision portal/2018.2.3

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.