CVE-2025-54548

On affected platforms, restricted users could view sensitive portions of the config database via a debug API (e.g., user password hashes)

Score

CVSS 3.1 4.3 Medium

Status

Deferred - psirt@arista.com

Published

2025-10-29

Last modified

2026-10-08

Weaknesses

CWE-200

Affected products

• Danz Monitoring Fabric (Arista Networks)

References

• https://www.arista.com/en/support/advisories-notices/security-advisory/22538-security-advisory-0124