Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2023-4896

A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface. Successful exploitation allows the attacker to gain access to some data that could be further exploited to laterally access devices managed and monitored by the AirWave server.

Published

2023-10-17T20:15:10.490

Last Modified

2024-11-21T08:36:12.677

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.8 (MEDIUM)

Weaknesses
  • Type: Primary
    NVD-CWE-noinfo
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application arubanetworks airwave ≤ 8.2.15.2 Yes
Application arubanetworks airwave < 8.3.0.2 Yes
References