Skip to content
OpenAdvisories
Unscored CVE-2020-24638 EUVD-2020-17354GHSA-5wpm-phm2-2mfm

Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user …

Published Jan 15, 2021 · Updated Aug 4, 2024 · Assigned by hpe

Description

Multiple authenticated remote command executions are possible in Airwave Glass before 1.3.3 via the glassadmin cli. These allow for a user with glassadmin privileges to execute arbitrary code as root on the underlying host operating system.

Affected products

VendorProductAffectedFixed
— Aruba AirWave Glass Software Prior to 1.3.3 —

References