PT-2023-2096 · Aruba · Arubaos

Publicado 2023-02-28 · Atualizado 2025-03-07 · CVE-2023-22775

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:L/Au:S/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions ArubaOS (affected versions not specified)

Description A vulnerability in the command line interface of ArubaOS is related to insufficient restrictions of the system's controlled area. This issue allows an authenticated attacker to access sensitive information, potentially gaining access to data beyond what is authorized by the user's existing privilege level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exposure of Resource to Wrong Sphere

Enumeração de Fraquezas

CWE-668

Identificadores relacionados

BDU:2023-01830

CVE-2023-22775

Produtos afetados

Arubaos

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2023-22775 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-01830 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-22775 · Aviso do Fabricante
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt · Aviso do Fabricante
• https://t.me/cibsecurity/59213 · Publicação no Telegram
• https://t.me/cvenotify/113946 · Publicação no Telegram