1. Home
  2. CVE Database
  3. CVE-2023-4896
MEDIUM · 6.8

CVE-2023-4896

A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface. Successful exploitation allows the atta...

Vulnerability Description

A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface. Successful exploitation allows the attacker to gain access to some data that could be further exploited to laterally access devices managed and monitored by the AirWave server.

CVSS Score

6.8

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
CHANGED
Confidentiality
HIGH
Integrity
NONE
Availability
NONE

Affected Products

VendorProductVersions
ArubanetworksAirwave<= 8.2.15.2

References

FAQ

What is CVE-2023-4896?

CVE-2023-4896 is a vulnerability with a CVSS score of 6.8 (MEDIUM). A vulnerability exists which allows an authenticated attacker to access sensitive information on the AirWave Management Platform web-based management interface. Successful exploitation allows the atta...

How severe is CVE-2023-4896?

CVE-2023-4896 has been rated MEDIUM with a CVSS base score of 6.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2023-4896?

Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Airwave.