1. Home
  2. CVE Database
  3. CVE-2020-24641
HIGH · 7.5

CVE-2020-24641

In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive infor...

Vulnerability Description

In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive information. This can be used to perform an authentication bypass and ultimately gain administrative access on the web administrative interface.

CVSS Score

7.5

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ArubanetworksAirwave Glass< 1.3.3

Related Weaknesses (CWE)

CWE-918CWE-287

References

FAQ

What is CVE-2020-24641?

CVE-2020-24641 is a vulnerability with a CVSS score of 7.5 (HIGH). In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive infor...

How severe is CVE-2020-24641?

CVE-2020-24641 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2020-24641?

Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Airwave Glass.