Vulnerabilities > CVE-2020-24641 - Server-Side Request Forgery (SSRF) vulnerability in Arubanetworks Airwave Glass
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive information. This can be used to perform an authentication bypass and ultimately gain administrative access on the web administrative interface.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 5 |