Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-25042

Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
hpe

Description

A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized access or data breaches.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Hewlett Packard Enterprise (HPE) AOS-CX

Default version status: affected

  • 10.10.0000 to ≤ <=10.10.1140affected
  • 10.13.0000 to ≤ <=10.13.1070affected
  • 10.14.0000 to ≤ <=10.14.1030affected
  • 10.15.0000 to ≤ <=10.15.1000affected

References