Skip to content
OpenAdvisories
Medium · 6.5 CVE-2025-23053 EUVD-2025-3096GHSA-cqc8-8583-c382

Authenticated privilege escalation via broken access control

Published Jan 28, 2025 · Updated Mar 13, 2025 · Assigned by hpe

Description

A privilege escalation vulnerability exists in the web-based management interface of HPE Aruba Networking Fabric Composer. Successful exploitation could allow an authenticated low privilege operator user to change the state of certain settings of a vulnerable system.

Affected products

VendorProductAffectedFixed
Hewlett Packard Enterprise (HPE) HPE Aruba Networking Fabric Composer (AFC) 7.0.0 – ≤ 7.1.0 —

References