Privilege Escalation in Aruba EdgeConnect Enterprise Orchestrator Management Interface

CVE-2022-44535

Summary

A security flaw in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator enables authenticated low-privileged users to escalate their privileges to that of an administrative user. This privilege escalation could allow attackers to gain complete control over the system, potentially leading to severe misconfigurations or data exposure. The affected versions include Aruba EdgeConnect Enterprise Orchestrator 9.2.1.40179 and below, 9.1.4.40436 and below, 9.0.7.40110 and below, 8.10.23.40015 and below, and any earlier branches not explicitly listed.

References