Vulnerability · Published Oct 17, 2023 · Assigned by hpe
CVE-2023-4896Authenticated Disclosure of Sensitive Information in AirWave Management Platform
Medium 6.8
In plain English
A medium-severity security flaw in Aruba AirWave Management Platform from HewarHewlett Packard Enterprise (HPE). There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 45% of all known vulnerabilities).
Severity (CVSS 3.1)6.8Medium
Exploit odds (30 days)0.5%top 54.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface. Successful exploitation allows the attacker to gain access to some data that could be further exploited to laterally access devices managed and monitored by the AirWave server.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| HewarHewlett Packard Enterprise (HPE) | Aruba AirWave Management Platform | 8.3.0.1 and below 8.2.15.2 and below |