Aruba AOS-10: CVE-2023-22777: Authenticated Information Disclosure in ArubaOS Web-based Management Interface

Aruba AOS-10: CVE-2023-22777: Authenticated Information Disclosure in ArubaOS Web-based Management Interface

Severity

6

CVSS

(AV:N/AC:L/Au:M/C:C/I:N/A:N)

Published

02/28/2023

Created

01/16/2025

Added

01/14/2025

Modified

02/04/2025

Description

An authenticated information disclosure vulnerability exists in the ArubaOS web-based management interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files in the underlying operating system.

Solution(s)

• aruba-aos-10-cve-2023-22777

References

• https://attackerkb.com/topics/cve-2023-22777
• CVE - 2023-22777
• https://csaf.arubanetworks.com/2023/hpe_aruba_networking_-_2023-002.json