CVE-2024-9188: Specially constructed queries cause cross platform scripting leaking administrator tokens
Published Jan 10, 2025
·Updated
Specially constructed queries cause cross platform scripting leaking administrator tokens
Affected Software
1 affected component
Arista NG Firewall<17.2
Remediation
Information
The recommended resolution for all issues documented above is to upgrade to the version indicated below at your earliest convenience.
* 17.2 Upgrade
Event History
Jan 10, 2025
CVE Published
via MITRE·10:05 PM
Data Sourced
via MITRE·10:05 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·10:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-9188?
CVE-2024-9188 has been identified as a critical vulnerability due to its potential for cross-platform scripting and leaking administrator tokens.
2
How do I fix CVE-2024-9188?
To mitigate CVE-2024-9188, upgrade to a version of Arista NG Firewall later than 17.2.
3
What software is affected by CVE-2024-9188?
CVE-2024-9188 specifically affects Arista NG Firewall versions prior to 17.2.
4
What type of vulnerability is CVE-2024-9188?
CVE-2024-9188 is classified as a cross-site scripting (XSS) vulnerability.
5
Can CVE-2024-9188 lead to unauthorized access?
Yes, CVE-2024-9188 can potentially allow attackers to leak administrator tokens, leading to unauthorized access.