Skip to content
Sign in
6.8 Medium

CVE-2023-22771 An insufficient session expiration vulnerability exists in the ArubaOS command line interface

Description

An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account

Affected products and versions

Product Affected versions Fixed in
Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central Versions not published

Other CVEs of Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central

The 51 CVEs of Aruba Mobility Conductor (formerly Mobility Master); Aruba Mobility Controllers; WLAN Gateways and SD-WAN Gateways managed by Aruba Central →
CVE-2024-33518 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via… 5.3 Medium CVE-2024-33517 An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Radio Frequency Manager service accessed via… 5.3 Medium CVE-2024-33516 An unauthenticated Denial of Service (DoS) vulnerability exists in the Auth service accessed via the PAPI protocol… 5.3 Medium CVE-2024-33515 Unauthenticated Denial-of-Service (DoS) vulnerabilities exist in the AP Management service accessed via the PAPI… 5.3 Medium
Track this CVE