Summary
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Aruba EdgeConnect SD-WAN Orchestrator ausnutzen, um Sicherheitsvorkehrungen zu umgehen, wodurch vertrauliche Informationen offengelegt und Daten manipuliert werden können.
Product
Aruba EdgeConnect ist eine SD-WAN-Produktfamilie für Unternehmenskunden.
Vulnerabilities 2
-
Critical 9.8
Authentication bypass via spoofed HTTP headers Orchestrator REST API
Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to vie…
-
Critical 9.8
Authentication bypass via spoofed HTTP headers Orchestrator REST API
Multiple vulnerabilities in the REST API interface of HPE Networking SD-WAN Orchestrator could allow an unauthenticated remote attacker to bypass web authentication mechanisms and access system functions. Successful exploitation could allow an attacker to vie…
Revision history
-
#1
Initiale Fassung
References
-
HPE Security Bulletin vom 2026-08-04
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw05100en_us&docLocale=en_US