CyberRota Analysis
AI-GeneratedA vulnerability exists in a VCO feature that fails to properly validate input from callers, enabling authenticated tenant accounts to make unauthorized requests to internal services. This could lead to unauthorized access and potential data exposure, posing a significant risk to organizations using the affected products. Enterprises with users holding the Enterprise Standard Admin role should prioritize addressing this issue to mitigate potential exploitation.
Original NVD Description
A VCO feature does not sufficiently validate caller-supplied input, allowing requests to be made on behalf of authenticated tenant accounts to internal services that are not otherwise accessible. This vulnerability requires a minimum role of Enterprise Standard Admin. This issue was discovered internally by Arista and the company is not aware of any malicious uses of this issue in customer networks.