Arista CloudVision Portal bug revealed, plus evidence it's been used

You know the drill: face-palm, download, patch, grumble about state of security, relax

Arista customers: if you're running a version of CloudVision Portal (CVP) older than 2016.1.2.1, get an update or risk getting p0wned."