CVE-2020-24641

In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive information. This can be used to perform an authentication bypass and ultimately gain administrative...

CVE-2020-24641

CVE-2020-24641 concerns Aruba AirWave Glass prior to 1.3.3, where an unauthenticated endpoint enables a Server-Side Request Forgery that can disclose sensitive information. The disclosed data can be leveraged to bypass authentication and potentially gain administrative access to the web admin int...