PT-2021-9119 · Aruba · Aruba Operating System

Published 2021-09-07 · Updated 2022-02-22 · CVE-2019-5318

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Aruba Operating System Software versions 6.x.x.x: all versions Aruba Operating System Software versions 8.x.x.x: all versions prior to 8.8.0.0

Description A remote cross-site request forgery (csrf) vulnerability was discovered in Aruba Operating System Software. This issue allows for a remote attack. Aruba has released patches for ArubaOS that address this security issue.

Recommendations For Aruba Operating System Software versions 6.x.x.x: all versions, update to a version that includes the released patches. For Aruba Operating System Software versions 8.x.x.x: all versions prior to 8.8.0.0, update to version 8.8.0.0 or later to address the security issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2019-5318

Affected Products

Aruba Operating System

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2019-5318 · Security Note
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2021-016.txt · Vendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-280624.pdf · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-5318 · Vendor Advisory
• https://t.me/cvenotify/27155 · Telegram Post
• https://t.me/cibsecurity/28330 · Telegram Post
• https://t.me/cvenotify/20811 · Telegram Post