Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network configurations with privileges at a higher effective level in Aruba AirWave Management Platform version(s): 8.2.15.0 and below.
References
Link | Resource |
---|---|
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-019.txt | Mitigation Vendor Advisory |
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-019.txt | Mitigation Vendor Advisory |
Configurations
History
21 Nov 2024, 07:15
Type | Values Removed | Values Added |
---|---|---|
References | () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-019.txt - Mitigation, Vendor Advisory |
07 Nov 2023, 03:49
Type | Values Removed | Values Added |
---|---|---|
Summary | Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network configurations with privileges at a higher effective level in Aruba AirWave Management Platform version(s): 8.2.15.0 and below. |
Information
Published : 2022-12-08 16:15
Updated : 2024-11-21 07:15
NVD link : CVE-2022-37918
Mitre link : CVE-2022-37918
CVE.ORG link : CVE-2022-37918
JSON object : View
Products Affected
arubanetworks
- airwave
CWE