CVE-2022-37914

🗓️ 28 Oct 2022 00:00:00Reported by hpeType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 70 Views

Vulnerabilities in Aruba EdgeConnect Enterprise Orchestrator's web-based interface could enable unauthorized remote access, leading to admin privilege escalation

Reporter	Title	Published	Views	Family All 11
BDU FSTEC	The vulnerability in the web interface of the Aruba EdgeConnect Enterprise Orchestrator platform allows a hacker to bypass security restrictions and gain increased privileges.	9 Dec 202200:00	–	bdu_fstec
Circl	CVE-2022-37914	13 Oct 202220:00	–	circl
CNNVD	Aruba Networks EdgeConnect Enterprise Orchestrator 授权问题漏洞	28 Oct 202200:00	–	cnnvd
Cvelist	CVE-2022-37914	28 Oct 202200:00	–	cvelist
EUVD	EUVD-2022-40521	3 Oct 202520:07	–	euvd
NVD	CVE-2022-37914	28 Oct 202202:15	–	nvd
OSV	CVE-2022-37914	28 Oct 202202:15	–	osv
Prion	Authentication flaw	28 Oct 202202:15	–	prion
Positive Technologies	PT-2022-5795 · Aruba · Aruba Edgeconnect Enterprise Orchestrator	11 Oct 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-37914	9 Jan 202610:49	–	redhatcve

NVD

Node

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange<8.10.23.40009on-premises

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange9.0.0–9.0.7.40108on-premises

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange9.1.0–9.1.3.40197on-premises

Node

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange<8.10.23.40009as-a-service

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange9.0.0–9.0.7.40108as-a-service

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange9.1.0–9.1.3.40197as-a-service

Node

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange<8.10.23.40009sp

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange9.0.0–9.0.7.40108sp

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange9.1.0–9.1.3.40197sp

Node

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange<8.10.23.40009global_enterprise_tenant_orchestrators

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange9.0.0–9.0.7.40108global_enterprise_tenant_orchestrators

arubanetworks aruba_edgeconnect_enterprise_orchestratorRange9.1.0–9.1.3.40197global_enterprise_tenant_orchestrators

[
  {
    "vendor": "n/a",
    "product": "Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators",
    "versions": [
      {
        "version": "Orchestrator 9.1.2.40051 and below",
        "status": "affected"
      },
      {
        "version": "Orchestrator 9.0.7.40108 and below",
        "status": "affected"
      },
      {
        "version": "Orchestrator 8.10.23.40009 and below",
        "status": "affected"
      },
      {
        "version": "Any older branches of Orchestrator not specifically mentioned",
        "status": "affected"
      }
    ]
  }
]