CVE-2019-5315

A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the…

published September 13, 2019

CVSS
—
EPSS
2%
Percentile
82.8
In the wild
Unconfirmed
What it is

A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. This vulnerability only affects ArubaOS 8.x.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02248 · 82.8th percentile
Published
2019-09-13T16:53Z
EPSS history
Timeline
  • 13 SEP 16:53Z
    A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the…
    cvelistv5