VULNERABILITY INTELLIGENCE

CVE-2020-24333

CVSS score6.5 MEDIUM

EPSS probability0.83%

CISA KEVNot currently listed

Published2020-09-22

Last modified2026-06-17

Description

A vulnerability in Arista’s CloudVision Portal (CVP) prior to 2020.2 allows users with “read-only” or greater access rights to the Configlet Management module to download files not intended for access, located on the CVP server, by accessing a specific API.