CVE-2023-35976
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Vulnerabilities exist that allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the user's existing privilege level.
Risk Assessment
An attacker with the appropriate privileges may gain access to data they should not have access to, potentially leading to a breach of information confidentiality within the organization.
Recommendation
It is recommended to monitor and restrict access to the command line interface and to regularly update the ArubaOS system to patch these vulnerabilities.
Original NVD description (English source)
Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.