ArubaOS Path Traversal Vulnerability (CNVD-2021-71257)

Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks (including mobile controllers and mobile access switches) from Aruba Networks, Inc. The vulnerability is caused by a failure to effectively validate and filter parameters, which could be exploited by an authenticated attacker to read or write arbitrary files to the ArubaOS web management interface and command line interface.