CVE-2020-24638

Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin privileges to execute arbitrary code as root on the underlying host operating system...

CVE-2020-24638

creationtimestamp| type| source ---|---|--- 2021-01-15 22:51:13+00:00| seen| https://t.me/cibsecurity/22223...

CVE-2020-24638

Aruba Airwave Glass prior to version 1.3.3 is affected by authenticated remote command execution via the glassadmin CLI. A user with glassadmin privileges can execute arbitrary code as root on the underlying OS. The issue is documented across multiple sources (NVD/Red Hat/NCSC). Impact is high: p...