Loading HuntDB...
Hunt
Vulnerability Intelligence by wss.sh
Home Daily Briefings High Impact CVEs Recent Exploits KEV Catalog GitHub Advisories Latest Updates Security News
Sign In Sign Up

CVE-2016-8527

UNKNOWN
Published 2018-08-06T20:00:00
Actions:

Expert Analysis

Professional remediation guidance

Get tailored security recommendations from our analyst team for CVE-2016-8527. We'll provide specific mitigation strategies based on your environment and risk profile.

No CVSS data available

Description

Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS). The vulnerability is present in the VisualRF component of AirWave. By exploiting this vulnerability, an attacker who can trick a logged-in AirWave administrative user into clicking a link could obtain sensitive information, such as session cookies or passwords. The vulnerability requires that an administrative users click on the malicious link while currently logged into AirWave in the same browser.

Available Exploits

Aruba Airwave <8.2.3.1 - Cross-Site Scripting

Aruba Airwave before version 8.2.3.1 is vulnerable to reflected cross-site scripting.

ID: CVE-2016-8527
Author: pikpikcu Medium

References:

Related News

No news articles found for this CVE.

Affected Products

Hewlett Packard Enterprise

Aruba AirWave

Affected Versions:

all versions up to, but not including, 8.2.3.1

GitHub Security Advisories

Community-driven vulnerability intelligence from GitHub

⚠ Unreviewed MODERATE

GHSA-8488-4hwv-3vc5

Advisory Details

Aruba Airwave all versions up to, but not including, 8.2.3.1 is vulnerable to a reflected cross-site scripting (XSS). The vulnerability is present in the VisualRF component of AirWave. By exploiting this vulnerability, an attacker who can trick a logged-in AirWave administrative user into clicking a link could obtain sensitive information, such as session cookies or passwords. The vulnerability requires that an administrative users click on the malicious link while currently logged into AirWave in the same browser.

CVSS Scoring

CVSS Score

5.0

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

References

ADVISORY https://nvd.nist.gov/vuln/detail/CVE-2016-8527
WEB https://www.exploit-db.com/exploits/41482
WEB http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-001.txt
WEB http://www.securityfocus.com/bid/96495

Advisory provided by GitHub Security Advisory Database. Published: May 14, 2022, Modified: May 14, 2022

References

http://www.securityfocus.com/bid/96495
http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-001.txt
https://www.exploit-db.com/exploits/41482/
Published: 2018-08-06T20:00:00
Last Modified: 2024-08-06T02:27:40.339Z
Copied to clipboard!