An unauthenticated actor with network access to the private HA interconnect may trigger sensitive HA peer functions without verification

An access-control flaw in the CV-CUE backend may allow an unauthenticated network attacker to access functionality intended only for internal services

Insufficient validation of inputs supplied through affected VeloCloud Edge management and configuration workflows may allow an authorized management request or configuration value to be interpreted as an operating-system command

The VeloCloud Edge software update workflow may accept update bundles without properly validating their signatures because the workflow does not restrict the digest algorithm used for artifact verification

Security Advisory 0199

On affected platforms running Arista EOS, the global common encryption key configuration may be logged in clear text, in local or remote accounting logs

A weakness has been identified in haxxorsid Stock-Management-System up to fbbbf213e9c93b87183a3891f77e3cc7095f22b0