CVE-2022-23678: Medium severity hpe aruba networking virtual intranet access vulnerability
A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communications that could allow for an attacker in a privileged network position to intercept sensitive information in Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system versions: 4.3.0 build 2208101 and below. Aruba has released upgrades for Virtual Intranet Access (VIA) Client that address this security vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-23678?
CVE-2022-23678 is a vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communications.
How does CVE-2022-23678 affect Aruba Virtual Intranet Access (VIA) client?
CVE-2022-23678 allows an attacker in a privileged network position to intercept sensitive information in Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system.
What is the severity of CVE-2022-23678?
The severity of CVE-2022-23678 is medium, with a severity value of 5.9.
Which versions of Aruba Virtual Intranet Access (VIA) client are affected by CVE-2022-23678?
Aruba Virtual Intranet Access (VIA) client versions up to and exclusive of 4.3.0 are affected by CVE-2022-23678.
How can I fix the CVE-2022-23678 vulnerability?
To fix the CVE-2022-23678 vulnerability, update Aruba Virtual Intranet Access (VIA) client to version 4.3.0 or newer.