CVE-2022-43518

An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface

Medium · published November 30, 2022

CVSS v3.1
4.9
EPSS
1%
Percentile
54.4
In the wild
Unconfirmed
What it is

An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.

The record
Technical detail
CVSS v3.1
4.9 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00750 · 54.4th percentile
Published
2022-11-30T19:26Z
EPSS history
Timeline
  • 30 NOV 19:26Z
    An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface
    cvelistv5