← CVE Intelligence

CVE-2022-43518

Hewlett Packard Enterprise (HPE) / Aruba EdgeConnect Enterprise Software PUBLISHED

Description (CNA)

An authenticated path traversal vulnerability exists in the Aruba EdgeConnect Enterprise web interface. Successful exploitation of this vulnerability results in the ability to read arbitrary files on the underlying operating system, including sensitive system files in Aruba EdgeConnect Enterprise Software version(s): ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below.

Affected (CNA)

Vendor / productVersions
Hewlett Packard Enterprise (HPE) / Aruba EdgeConnect Enterprise Softwareaffected ECOS 9.2.1.0 and below; ECOS 9.1.3.0 and below; ECOS 9.0.7.0 and below; ECOS 8.3.7.1 and below;

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.