Arista patched an exploited SQL injection in VeloCloud Orchestrator that lets the lowest-privilege account become a superuser operator.
A CVSS 10.0 input validation bug in on-premises VeloCloud Orchestrator is under active exploitation, and fixes cover only two of…