CVE-2019-5314

MEDIUM

6.1

Description

Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability.

CVE Details

CVSS v3.1 Score6.1

SeverityMEDIUM

CVSS VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack VectorNETWORK

ComplexityLOW

Privileges RequiredNONE

User InteractionREQUIRED

Published9/13/2019

Last Modified11/21/2024

Sourcenvd

Honeypot Sightings0

Affected Products

arubanetworks:arubaos

Weaknesses (CWE)

CWE-74

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt(security-alert@hpe.com)

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt(af854a3a-2127-422b-91ae-364da2661108)

IOC Correlations

No correlations recorded

This product uses data from the NVD API but is not endorsed or certified by the NVD.