Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network configurations with privileges at a higher effective level in Aruba AirWave Management Platform version(s): 8.2.15.0 and below.
References
| Link | Resource |
|---|---|
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-019.txt | Mitigation Vendor Advisory |
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-019.txt | Mitigation Vendor Advisory |
Configurations
History
23 Apr 2025, 16:15
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-284 |
21 Nov 2024, 07:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-019.txt - Mitigation, Vendor Advisory |
07 Nov 2023, 03:49
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network configurations with privileges at a higher effective level in Aruba AirWave Management Platform version(s): 8.2.15.0 and below. |
Information
Published : 2022-12-08 16:15
Updated : 2025-04-23 16:15
NVD link : CVE-2022-37918
Mitre link : CVE-2022-37918
CVE.ORG link : CVE-2022-37918
JSON object : View
Products Affected
arubanetworks
- airwave
CWE