CVE-2023-4896

published 2023-10-17

CVE-2023-4896: A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management…

Priority P3 38 medium 6.5 CVSS 3.1

AV N AC L PR L UI N S U C H I N A N

A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface. Successful exploitation allows the attacker to gain access to some data that could be further exploited to laterally access devices managed and monitored by the AirWave server.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
arubanetworks	airwave	<= 8.2.15.2	—
arubanetworks	airwave	>= 8.3.0 < 8.3.0.2	8.3.0.2
hewarhewlett_packard_enterprise	aruba_airwave_management_platform	—	—
hewarhewlett_packard_enterprise	aruba_airwave_management_platform	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.