PT-2023-22739 · Aruba · Aruba Edgeconnect Enterprise

CVE-2023-30508 · Publicado 2023-05-16 · Atualizado 2025-01-22

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Aruba EdgeConnect Enterprise (affected versions not specified)

Description Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities results in the ability to read arbitrary files on the underlying operating system, including sensitive system files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2023-30508

Produtos afetados

Aruba Edgeconnect Enterprise

Referências · 8

• https://t.me/cibsecurity/64255 · Publicação no Telegram
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt · Nota
• https://t.me/cvenotify/51102 · Publicação no Telegram
• https://osv.dev/vulnerability/CVE-2023-30508 · Aviso do Fabricante
• https://t.me/cvenotify/53879 · Publicação no Telegram
• https://t.me/cvenotify/108289 · Publicação no Telegram
• https://t.me/cvenotify/50584 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-30508 · Nota de Segurança