CVE-2022-37917

Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network configurations with privileges at a higher effective level in Aruba AirWave Management Platform version(s): 8.2.15.0 and below.
Configurations

Configuration 1 (hide)

cpe:2.3:a:arubanetworks:airwave:*:*:*:*:*:*:*:*

History

21 Nov 2024, 07:15

Type Values Removed Values Added
References () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-019.txt - Mitigation, Vendor Advisory () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-019.txt - Mitigation, Vendor Advisory

07 Nov 2023, 03:49

Type Values Removed Values Added
Summary Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network configurations with privileges at a higher effective level in Aruba AirWave Management Platform version(s): 8.2.15.0 and below. Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network configurations with privileges at a higher effective level in Aruba AirWave Management Platform version(s): 8.2.15.0 and below.

Information

Published : 2022-12-08 16:15

Updated : 2024-11-21 07:15


NVD link : CVE-2022-37917

Mitre link : CVE-2022-37917

CVE.ORG link : CVE-2022-37917


JSON object : View

Products Affected

arubanetworks

  • airwave