CVE-2022-37918

CVE-2022-37918 affects Aruba AirWave Management Platform (web interface). The root issue is broken access control on web-based URLs, allowing a remote attacker with limited privileges to access sensitive information and/or modify network configurations at higher privileges. Affected versions are ...

CVE-2022-37918 Broken Access Control for some Web-based Management URLs in AirWave Management Platform

Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. These vulnerabilities could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network...