PT-2023-3389 · Aruba · Aruba Edgeconnect Enterprise

CVE-2023-30509

·

Publicado

2023-05-16

·

Atualizado

2025-01-22

CVSS v3.1

6.5

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Aruba EdgeConnect Enterprise (affected versions not specified)
Description The issue is related to multiple authenticated path traversal vulnerabilities in the command line interface of the Aruba EdgeConnect Enterprise platform. These vulnerabilities can be exploited by a remote attacker to disclose protected information, specifically allowing the reading of arbitrary files on the underlying operating system, including sensitive system files.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Enumeração de Fraquezas

Identificadores relacionados

BDU:2023-03557
CVE-2023-30509

Produtos afetados

Aruba Edgeconnect Enterprise