Arista Networks Arista Edge Threat Management.

Specially constructed queries cause cross platform scripting leaking administrator tokens

• Arista Networks Arista Edge Threat Management

A user with advanced report application access rights can perform actions for which they are not authorized

• Arista Networks Arista Edge Threat Management
• CWE-653

Backup uploads to ETM subject to man-in-the-middle interception

• Arista Networks Arista Edge Threat Management
• CWE-322

Specially constructed queries targeting ETM could discover active remote access sessions

• Arista Networks Arista Edge Threat Management
• Information disclosure

Expired and unusable administrator authentication tokens can be revealed by units that have timed out from ETM access

• Arista Networks Arista Edge Threat Management
• CWE-1230

Multiple SQL Injection vulnerabilities exist in the reporting application. A user with advanced report application access rights can exploit the SQL injection, allowing them to execute commands on th…

• Arista Networks Arista Edge Threat Management
• SQL injection

A user with administrator privileges is able to retrieve authentication tokens

• Arista Networks Arista Edge Threat Management
• Authentication bypass

The administrator is able to configure an insecure captive portal script

• Arista Networks Arista Edge Threat Management
• Code injection

A user with administrator privileges can perform command injection

• Arista Networks Arista Edge Threat Management
• Command injection