Aruba AOS-8: CVE-2023-22772: Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion.

Aruba AOS-8: CVE-2023-22772: Authenticated Path Traversal in ArubaOS Web-based Management Interface Allows for Arbitrary File Deletion.

Severity

8

CVSS

(AV:N/AC:L/Au:M/C:N/I:C/A:C)

Published

02/28/2023

Created

01/16/2025

Added

01/14/2025

Modified

02/04/2025

Description

An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to delete arbitrary files in the underlying operating system.

Solution(s)

• aruba-aos-8-cve-2023-22772

References

• https://attackerkb.com/topics/cve-2023-22772
• CVE - 2023-22772
• https://csaf.arubanetworks.com/2023/hpe_aruba_networking_-_2023-002.json