medium4.9
CVE-2023-22776
An authenticated path traversal vulnerability exists in the ArubaOS command line interface.
Impact
An authenticated path traversal vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arubanetworks | Arubaos | from 8.6.0.0 through 8.6.0.19 from 8.10.0.0 through 8.10.0.4 from 10.3.0.0 through 10.3.1.0 |
| Arubanetworks | Sd-Wan | from 8.7.0.0-2.3.0.0 through 8.7.0.0-2.3.0.8 |