Not rated
CVE-2020-24639 There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a…
Description
There is a vulnerability caused by unsafe Java deserialization that allows for arbitrary command execution in a containerized environment within Airwave Glass before 1.3.3. Successful exploitation can lead to complete compromise of the underlying host operating system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aruba AirWave Glass Software | Versions not published |
Other CVEs of Aruba AirWave Glass Software
The 4 CVEs of Aruba AirWave Glass Software →
CVE-2020-24640
There is a vulnerability caused by insufficient input validation that allows for arbitrary command execution in a…
Not rated
CVE-2020-24638
Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli
Not rated
CVE-2020-24641
In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated…
Not rated