PT-2020-19385 · Aruba · Aruba Analytics/Location Engine

Published 2020-09-04 · Updated 2020-09-09 · CVE-2020-7119

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Aruba Analytics and Location Engine (ALE) versions 2.1.0.2 and earlier

Description A vulnerability exists in the Aruba Analytics and Location Engine (ALE) web management interface that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user.

Recommendations For versions 2.1.0.2 and earlier, update to a version later than 2.1.0.2 to resolve the issue.

Fix

Related Identifiers

CVE-2020-7119

Affected Products

Aruba Analytics/Location Engine

References · 3

• https://arubanetworks.com/assets/alert/ARUBA-PSA-2020-008.txt · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2020-7119 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-7119 · Security Note