CVE-2025-37100
A vulnerability in the APIs of HPE Aruba Networking Private 5G Core could potentially expose sensitive information to unauthorized users. A successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system files containing sensitive information.
- Score
- CVSS 3.1 7.7 High
- Status
- Deferred - security-alert@hpe.com
- Published
- 2025-06-10
- Last modified
- 2025-06-10
- Weaknesses
- CWE-22, CWE-922
Affected products
References
- https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04883en_us&docLocale=en_US
