PT-2023-22739 · Aruba · Aruba Edgeconnect Enterprise

Published 2023-05-16 · Updated 2025-01-22 · CVE-2023-30508

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Aruba EdgeConnect Enterprise (affected versions not specified)

Description Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities results in the ability to read arbitrary files on the underlying operating system, including sensitive system files.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2023-30508

Affected Products

Aruba Edgeconnect Enterprise

References · 8

• https://osv.dev/vulnerability/CVE-2023-30508 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-30508 · Security Note
• https://t.me/cibsecurity/64255 · Telegram Post
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt · Note
• https://t.me/cvenotify/51102 · Telegram Post
• https://t.me/cvenotify/53879 · Telegram Post
• https://t.me/cvenotify/108289 · Telegram Post
• https://t.me/cvenotify/50584 · Telegram Post