Lucene search
HistoryMar 01, 2023 - 8:15 a.m.
CVE-2023-22771
arubaos
session expiration
vulnerability
cli
exploitation
attacker
account
device
CVSS3
2.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
23.6%
An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account
Affected configurations
Node
arubanetworksarubaosRange8.6.0.0–8.6.0.19
ORarubanetworksarubaosRange8.10.0.0–8.10.0.4
ORarubanetworksarubaosRange10.3.0.0–10.3.1.0
arubanetworks7010Match-
ORarubanetworks7030Match-
ORarubanetworks7205Match-
ORarubanetworks7210Match-
ORarubanetworks7220Match-
ORarubanetworks7240xmMatch-
ORarubanetworks7280Match-
ORarubanetworks9004Match-
ORarubanetworks9004-lteMatch-
ORarubanetworks9012Match-
ORarubanetworksmc-va-10Match-
ORarubanetworksmc-va-1kMatch-
ORarubanetworksmc-va-250Match-
ORarubanetworksmc-va-50Match-
ORarubanetworksmcr-hw-10kMatch-
ORarubanetworksmcr-hw-1kMatch-
ORarubanetworksmcr-hw-5kMatch-
ORarubanetworksmcr-va-10kMatch-
ORarubanetworksmcr-va-1kMatch-
ORarubanetworksmcr-va-50Match-
ORarubanetworksmcr-va-500Match-
ORarubanetworksmcr-va-5kMatch-
Node
arubanetworkssd-wanRange8.7.0.0-2.3.0.0–8.7.0.0-2.3.0.8
| Vendor | Product | Version | CPE |
|---|---|---|---|
| arubanetworks | arubaos | * | cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:* |
| arubanetworks | 7010 | - | cpe:2.3:h:arubanetworks:7010:-:*:*:*:*:*:*:* |
| arubanetworks | 7030 | - | cpe:2.3:h:arubanetworks:7030:-:*:*:*:*:*:*:* |
| arubanetworks | 7205 | - | cpe:2.3:h:arubanetworks:7205:-:*:*:*:*:*:*:* |
| arubanetworks | 7210 | - | cpe:2.3:h:arubanetworks:7210:-:*:*:*:*:*:*:* |
| arubanetworks | 7220 | - | cpe:2.3:h:arubanetworks:7220:-:*:*:*:*:*:*:* |
| arubanetworks | 7240xm | - | cpe:2.3:h:arubanetworks:7240xm:-:*:*:*:*:*:*:* |
| arubanetworks | 7280 | - | cpe:2.3:h:arubanetworks:7280:-:*:*:*:*:*:*:* |
| arubanetworks | 9004 | - | cpe:2.3:h:arubanetworks:9004:-:*:*:*:*:*:*:* |
| arubanetworks | 9004-lte | - | cpe:2.3:h:arubanetworks:9004-lte:-:*:*:*:*:*:*:* |
Related
cve
cve
CVE-2023-22771
2023-03-01 08:15:14
cvelist
cvelist
prion
prion
Session fixation
2023-03-01 08:15:00
CVSS3
2.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N
EPSS
0.001
Percentile
23.6%
Related for NVD:CVE-2023-22771