Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-24641

In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosur

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive information. This can be used to perform an authentication bypass and ultimately gain administrative access on the web administrative interface.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a Aruba AirWave Glass Software

  • Prior to 1.3.3affected

References