CVE-2023-22771

Insufficient Session Expiration in ArubaOS Command Line Interface

Medium · published February 28, 2023

CVSS v3.1
6.8
EPSS
0%
Percentile
37.5
In the wild
Unconfirmed
What it is

An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account

The record
Technical detail
CVSS v3.1
6.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00443 · 37.5th percentile
Published
2023-02-28T16:53Z
EPSS history
Timeline
  • 28 FEB 16:53Z
    Insufficient Session Expiration in ArubaOS Command Line Interface
    cvelistv5