CVE-2023-22775: Authenticated Sensitive Information Disclosure in ArubaOS Command Line Interface
A vulnerability exists which allows an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this security issue?
The vulnerability ID is CVE-2023-22775.
What software is affected by this vulnerability?
The ArubaOS command line interface in Arubanetworks Sd-wan, Arubanetworks Arubaos (versions 8.6.0.0 to 8.6.0.19 and 8.10.0.0 to 8.10.0.4), and Arubanetworks Arubaos (versions 10.3.0.0 to 10.3.1.0) are affected.
What is the severity level of CVE-2023-22775?
The severity level of CVE-2023-22775 is medium, with a CVSS score of 6.5.
What can an attacker do if they exploit this vulnerability?
An authenticated attacker can access sensitive information on the ArubaOS command line interface beyond their authorized privilege level.
Is there a fix available for this vulnerability?
Yes, it is recommended to apply the necessary patches or upgrades provided by Aruba Networks to address this vulnerability.