CVE-2021-26960
A remote unauthenticated cross-site request forgery (csrf) vulnerability was discovered in Aruba AirWave Management Platform version(s): Prior to 8.2.12.0. A vulnerability in the AirWave web-based management interface could allow an unauthenticated remote attacker to conduct a CSRF attack against a vulnerable system. A successful exploit would consist of an attacker persuading an authorized user to follow a malicious link, resulting in arbitrary actions being carried out with the privilege level of the targeted user.
- Score
- CVSS 3.1 8.8 High
- Status
- Modified - security-alert@hpe.com
- Published
- 2021-03-05
- Last modified
- 2024-08-03
- Weaknesses
- CWE-352
Affected products
References
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-005.txt
