PT-2023-25400 · Aruba · Arubaos

Published 2023-07-05 · Updated 2023-07-11 · CVE-2023-35976

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions ArubaOS (affected versions not specified)

Description Vulnerabilities exist that allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the user's existing privilege level.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2023-35976

Affected Products

Arubaos

References · 4

• https://arubanetworks.com/assets/alert/ARUBA-PSA-2023-008.txt · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-35976 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-35976 · Security Note
• https://t.me/cibsecurity/65981 · Telegram Post