PT-2023-2093 · Aruba · Arubaos

Nicholas Starke · Publicado 2023-02-28 · Atualizado 2025-03-07 · CVE-2023-22776

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ArubaOS (affected versions not specified)

Description An authenticated path traversal issue exists in the ArubaOS command line interface, allowing successful exploitation to result in the ability to read arbitrary files on the underlying operating system, including sensitive system files. This can enable unauthorized access to protected information.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

BDU:2023-01827

CVE-2023-22776

Produtos afetados

Arubaos

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-22776 · Nota de Segurança
• https://t.me/cvenotify/113947 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-01827 · Nota de Segurança
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt · Aviso do Fabricante
• https://t.me/cibsecurity/59203 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-22776 · Aviso do Fabricante