What is the severity of CVE-2019-5315?

CVE-2019-5315 is classified as a critical severity vulnerability due to its potential for command injection.

How do I fix CVE-2019-5315?

To fix CVE-2019-5315, upgrade ArubaOS to a version higher than 8.3.0.0.

Who is affected by CVE-2019-5315?

CVE-2019-5315 affects users of ArubaOS versions between 8.0.0.0 and 8.3.0.0.

What type of vulnerability is CVE-2019-5315?

CVE-2019-5315 is a command injection vulnerability that allows authenticated users to execute arbitrary commands.

What could a malicious administrator do with CVE-2019-5315?

A malicious administrator exploiting CVE-2019-5315 could install backdoors or alter system configurations on the affected system.

Vulnerability/
CVE-2019-5315

critical

CWE

78 77

13/9/2019

4/8/2024

CVE-2019-5315: OS Command Injection

First published: Fri Sep 13 2019(Updated: )

A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. This vulnerability only affects ArubaOS 8.x.

Credit: security-alert@hpe.com

Affected Software	Affected Version	How to fix
Arubanetworks Arubaos	>=8.0.0.0<8.3.0.0

Never miss a vulnerability like this again

Reference Links

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt

Frequently Asked Questions

What is the severity of CVE-2019-5315?
CVE-2019-5315 is classified as a critical severity vulnerability due to its potential for command injection.
How do I fix CVE-2019-5315?
To fix CVE-2019-5315, upgrade ArubaOS to a version higher than 8.3.0.0.
Who is affected by CVE-2019-5315?
CVE-2019-5315 affects users of ArubaOS versions between 8.0.0.0 and 8.3.0.0.
What type of vulnerability is CVE-2019-5315?
CVE-2019-5315 is a command injection vulnerability that allows authenticated users to execute arbitrary commands.
What could a malicious administrator do with CVE-2019-5315?
A malicious administrator exploiting CVE-2019-5315 could install backdoors or alter system configurations on the affected system.

collector/nvd-index
agent/weakness
agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/severity
agent/author
agent/references
agent/first-publish-date
agent/event
agent/description
agent/tags
agent/source
vendor/arubanetworks
canonical/arubanetworks arubaos
version/arubanetworks arubaos/8.0.0.0

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Frequently Asked Questions

What is the severity of CVE-2019-5315?
CVE-2019-5315 is classified as a critical severity vulnerability due to its potential for command injection.
How do I fix CVE-2019-5315?
To fix CVE-2019-5315, upgrade ArubaOS to a version higher than 8.3.0.0.
Who is affected by CVE-2019-5315?
CVE-2019-5315 affects users of ArubaOS versions between 8.0.0.0 and 8.3.0.0.
What type of vulnerability is CVE-2019-5315?
CVE-2019-5315 is a command injection vulnerability that allows authenticated users to execute arbitrary commands.
What could a malicious administrator do with CVE-2019-5315?
A malicious administrator exploiting CVE-2019-5315 could install backdoors or alter system configurations on the affected system.