VYPR
← All advisories
High severity7.8NVD Advisory· Published Dec 19, 2019· Updated Jun 17, 2026

CVE-2019-18181

CVE-2019-18181

Description

In CloudVision Portal all releases in the 2018.1 and 2018.2 Code train allows users with read-only permissions to bypass permissions for restricted functionality via CVP API calls through the Configlet Builder modules. This vulnerability can potentially enable authenticated users with read-only access to take actions that are otherwise restricted in the GUI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Arista/Cloudvision Portal2 versions
    cpe:2.3:a:arista:cloudvision_portal:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:arista:cloudvision_portal:*:*:*:*:*:*:*:*range: >=2018.1.0,<=2018.1.4
    • (no CPE)range: 2018.1, 2018.2
  • CloudVision/CloudVision Portaldescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.