CVE-2020-24639: Critical severity hp aruba airwave glass vulnerability
Published Jan 15, 2021
·Updated
There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation can lead to complete compromise of the underlying host operating system.
Affected Software
1 affected component
Arubanetworks Airwave Glass<1.3.3
Event History
Jan 15, 2021
CVE Published
via MITRE·06:33 PM
Data Sourced
via MITRE·06:33 PM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2020-24639?
CVE-2020-24639 has a high severity rating due to its potential for arbitrary command execution, leading to complete compromise of the host operating system.
2
How do I fix CVE-2020-24639?
To fix CVE-2020-24639, upgrade Airwave Glass to version 1.3.3 or later.
3
What software is affected by CVE-2020-24639?
CVE-2020-24639 affects Airwave Glass versions prior to 1.3.3.
4
What type of vulnerability is CVE-2020-24639?
CVE-2020-24639 is caused by unsafe Java deserialization.
5
What can happen if CVE-2020-24639 is exploited?
Successful exploitation of CVE-2020-24639 can lead to arbitrary command execution and complete system compromise.