Lucene search

[email protected]CVE-2023-4896

HistoryOct 17, 2023 - 8:15 p.m.

CVE-2023-4896

2023-10-1720:15:10

[email protected]

web.nvd.nist.gov

vulnerability

airwave management platform

authenticated attackers

sensitive information

exploitation

lateral access

nvd

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.3%

JSON

A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface. Successful exploitation allows the attacker to gain access to some data that could be further exploited to laterally access devices managed and monitored by the AirWave server.

Affected configurations

NVD

Node

arubanetworksairwaveRange≤8.2.15.2

arubanetworksairwaveRange8.3.0–8.3.0.2

CPENameOperatorVersion
arubanetworks:airwavearubanetworks airwavele8.2.15.2
arubanetworks:airwavearubanetworks airwavelt8.3.0.2

CPE	Name	Operator	Version
arubanetworks:airwave	arubanetworks airwave	le	8.2.15.2
arubanetworks:airwave	arubanetworks airwave	lt	8.3.0.2

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Aruba AirWave Management Platform",
    "vendor": "HewarHewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "status": "affected",
        "version": "8.3.0.1 and below "
      },
      {
        "status": "affected",
        "version": "8.2.15.2 and below"
      }
    ]
  }
]

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-015.txt

6.8 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

6.3 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

18.3%

JSON

Related for CVE-2023-4896

nvd1 cvelist1 prion1