Skip to content
4.9 Medium

CVE-2022-43518 An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface

Description

An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.

Affected products and versions

Product Affected versions Fixed in
Aruba EdgeConnect Enterprise Software Versions not published
The 23 CVEs of Aruba EdgeConnect Enterprise Software →
Track this CVE