Description
The web interface in Aruba Networks AirWave before 7.7.14 and 8.x before 8.0.5 allows remote authenticated users to gain privileges and execute arbitrary commands via unspecified vectors.
References
- http://www.arubanetworks.com/support/alerts/aid-11192014.txt
- airwave-cve20148368-priv-esc(98871) vdb-entry
- 62578 third-party-advisory