VULNERABILITY INTELLIGENCE

CVE-2020-24641

CVSS score7.5 HIGH
EPSS probability1.48%
CISA KEVNot currently listed
Published2021-01-15
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

In Aruba AirWave Glass before 1.3.3, there is a Server-Side Request Forgery vulnerability through an unauthenticated endpoint that if successfully exploited can result in disclosure of sensitive information. This can be used to perform an authentication bypass and ultimately gain administrative access on the web administrative interface.

Weakness classification

  • CWE-287: Improper Authentication
  • CWE-918: Server-Side Request Forgery (SSRF)

Primary references