Vulnerability Description
An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to read arbitrary files in the underlying operating system.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Arubanetworks | Arubaos | >= 10.3.0.0, < 10.4.1.1 |
| Hp | Instantos | >= 6.4.0.0, < 8.6.0.24 |
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04647en_us&docLocal
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-006.txtBroken LinkVendor Advisory
FAQ
What is CVE-2024-31483?
CVE-2024-31483 is a vulnerability with a CVSS score of 4.9 (MEDIUM). An authenticated sensitive information disclosure vulnerability exists in the CLI service accessed via the PAPI protocol. Successful exploitation of this vulnerability results in the ability to read a...
How severe is CVE-2024-31483?
CVE-2024-31483 has been rated MEDIUM with a CVSS base score of 4.9/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2024-31483?
Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Arubaos, Hp Instantos.