CVE-2025-37100 — Exposure of Sensitive Information to an Unauthorized User in HPE Aruba Networking Private 5G Core

CVE-2025-37100

Exposure of Sensitive Information to an Unauthorized User in HPE Aruba Networking Private 5G Core PUBLISHED

Description (CNA)

A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system files containing sensitive information.

Affected (CNA)

Vendor / product	Versions
Hewlett Packard Enterprise (HPE) / HPE Aruba Networking Private 5G Core	affected 1.24.1.0 through 1.25.1.0

CWE

No CWE identifiers supplied.

References

https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04883en_us&docLocale=en_US

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.