CVE-2023-4896
Authenticated Disclosure of Sensitive Information in AirWave Management Platform
- State
- Published
- Severity
- 6.8 Medium
- Published
- Oct 17, 2023
- Updated
- Sep 13, 2024
- Reserved
- Sep 11, 2023
Description
A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface. Successful exploitation allows the attacker to gain access to some data that could be further exploited to laterally access devices managed and monitored by the AirWave server.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 6.8 Medium | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N | hpe |
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
Aruba AirWave Management PlatformHewarHewlett Packard Enterprise (HPE) |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.