VeloCloud's exploited flaw turns read-only tenants into operators Arista reports active attacks against its network-management portal. On-premises operators need fixed releases, restricted access and preserved investigation logs.