CVE-2023-30508: Authenticated Remote Path Traversal in Aruba EdgeConnect Enterprise Command Line Interface
Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for the Aruba EdgeConnect Enterprise command line interface path traversal vulnerability?
The vulnerability ID is CVE-2023-30508.
What is the severity of CVE-2023-30508?
The severity of CVE-2023-30508 is medium with a CVSS score of 6.5.
How does the Aruba EdgeConnect Enterprise command line interface path traversal vulnerability impact the system?
Successful exploitation of this vulnerability allows an authenticated attacker to read arbitrary sensitive files on the underlying operating system.
Which versions of Aruba EdgeConnect Enterprise are affected by CVE-2023-30508?
Versions up to and including 9.0.8.0, as well as versions between 9.1.0.0 and 9.1.5.0, and versions between 9.2.0.0 and 9.2.3.0 are affected.
Is there a fix available for CVE-2023-30508?
Yes, it is recommended to update to a version of Aruba EdgeConnect Enterprise that is not affected by the vulnerability.