Multiple authenticated path traversal vulnerabilities exist in the Aruba EdgeConnect Enterprise command line interface. Successful exploitation of these vulnerabilities result in the ability to read arbitrary files on the underlying operating system, including sensitive system files.
References
Configurations
Configuration 1 (hide)
|
History
22 Jan 2025, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-007.txt - |
07 Jul 2023, 15:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
25 May 2023, 15:42
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:arubanetworks:edgeconnect_enterprise:*:*:*:*:*:*:*:* | |
| References | (MISC) https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-0007.txt - Broken Link, Vendor Advisory | |
| First Time |
Arubanetworks
Arubanetworks edgeconnect Enterprise |
|
| CWE | CWE-22 | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
16 May 2023, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-05-16 19:15
Updated : 2025-01-22 21:15
NVD link : CVE-2023-30508
Mitre link : CVE-2023-30508
JSON object : View
Products Affected
arubanetworks
- edgeconnect_enterprise
CWE
CWE-22
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')