CVE-2022-37918
Assigner: hpe
Published: 2022-12-08T00:00:00
State: PUBLISHED
affected: defaultStatus: unaffected
product: Aruba AirWave Management Platform
vendor: n/a
versions: status: affected
version: 8.2.15.0 and below
credits: type: reporter
user: 00000000-0000-4000-9000-000000000000
value:   oussama sadouki
descriptions: supportingMedia: base64: no
type: text/html
value: <p>Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network configurations with privileges at a higher effective level in Aruba AirWave Management Platform version(s): 8.2.15.0 and below.</p>
value: Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network configurations with privileges at a higher effective level in Aruba AirWave Management Platform version(s): 8.2.15.0 and below.


problemTypes: descriptions: description: Broken Access Control
source: discovery: UNKNOWN
title: Broken Access Control for some Web-based Management URLs in AirWave Management Platform
x_generator: engine: Vulnogram 0.1.0-dev