CVE-2021-28493: Arista Metamako Operating System, заобикаляне на вход

Описание

Оригинално описание

In Arista's MOS (Metamako Operating System) software which is supported on the 7130 product line, under certain conditions, a user may be able to execute commands despite not having the privileges to do so. This issue affects: Arista Metamako Operating System All releases in the MOS-0.1x train MOS-0.32.0 and prior releases

Засегнати продукти

• Arista Metamako Operating System: MOS-0.33.0 преди MOS-0.33.0

Вид слабост

• CWE-287 Неправилна автентикация

История

Други уязвимости в Arista Metamako Operating System

• 9.6CVE-2021-28494
• 7.2CVE-2021-28495
• 4.4CVE-2021-28497
• 6.3CVE-2021-28499
• 8.7CVE-2021-28498

Първоизточници

• https://www.cve.org/CVERecord?id=CVE-2021-28493
• https://nvd.nist.gov/vuln/detail/CVE-2021-28493
• https://www.arista.com/en/support/advisories-notices/security-advisories/12915-security-advisory-67