All vulnerabilities

Servers and applications

CVE-2023-22791

A vulnerability exists in Aruba InstantOS and ArubaOS 10 where an edge-case combination of network configuration, a specific WLAN environment and an attacker already possessing valid user credentials on that WLAN can lead to sensitive information being disclosed via the WLAN. The scenarios in which this disclosure of potentially sensitive information can occur are complex and depend on factors…

Severity
Medium 4.8
Published
8 May 2023
Last changed
17 Jun 2026
Added to UpHeron
3 Nov 2026
Sources
NVD

Affected software

SoftwareAffected versions
HPE ArubaOSServers and applications · cpe:o:arubanetworks:arubaos
  • From 10.3.0.0 up to 10.3.1.0

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-22791
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-22791