CVE-2023-35977
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk36th percentile - higher than 36% of all known CVEs
Summary
Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the user's existing privilege level.
Risk Assessment
The risk to the organization involves the potential for unauthorized access to sensitive data, which could lead to breaches of privacy and information security.
Recommendation
It is recommended to conduct a user privilege audit and update the ArubaOS system to patch the identified vulnerabilities.
Original NVD description (English source)
Vulnerabilities exist which allow an authenticated attacker to access sensitive information on the ArubaOS command line interface. Successful exploitation could allow access to data beyond what is authorized by the users existing privilege level.