Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-54548 EUVD-2025-36725GHSA-47pv-wxrm-xq5g

On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes)

Published Oct 29, 2025 · Updated Oct 30, 2025 · Assigned by Arista

Description

On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes)

Affected products

VendorProductAffectedFixed
Arista Networks DANZ Monitoring Fabric ≤ DMF 8.6.1, ≤ DMF 8.5.2, ≤ CCF 6.2.4, ≤ CVA 7.0, ≤ MCD 2.4.0 —

Advisories 1

References