Aller au contenu
Se connecter
Non notée

CVE-2019-5315 A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated…

Description

A command injection vulnerability is present in the web management interface of ArubaOS that permits an authenticated user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that would not be logged. This vulnerability only affects ArubaOS 8.x.

Produits et versions touchés

Produit Versions touchées Corrigé en
Aruba Mobility Controllers Versions non publiées

Autres CVE de Aruba Mobility Controllers

Les 3 CVE de Aruba Mobility Controllers →
CVE-2019-5314 Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS Non notée CVE-2018-7081 A remote code execution vulnerability is present in network-listening components in some versions of ArubaOS Non notée
Suivre cette CVE