CSRF Bypass in Aruba AirWave by Aruba Networks
CVE-2015-1391

8.8HIGH

Key Information:

Vendor

HP
Status
Airwave
Vendor
CVE Published:
5 September 2023

What is CVE-2015-1391?

A serious security vulnerability exists in Aruba AirWave that allows an attacker to bypass the CSRF protection mechanism, potentially enabling unauthorized actions on behalf of legitimate users. This flaw affects versions of the software prior to 8.0.7 and poses a risk as it may permit attackers to interact with the application's backend without proper authorization.

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.