vulnerability
Aruba AOS-CX: CVE-2025-25042: Authenticated Access Control Vulnerability allows Sensitive Information Disclosure in AOS-CX REST Interface
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 4 | (AV:N/AC:L/Au:S/C:P/I:N/A:N) | Mar 18, 2025 | Mar 20, 2025 | Jul 2, 2025 |
Severity
4
CVSS
(AV:N/AC:L/Au:S/C:P/I:N/A:N)
Published
Mar 18, 2025
Added
Mar 20, 2025
Modified
Jul 2, 2025
Description
A vulnerability in the AOS-CX REST interface could allow an authenticated remote attacker with low privileges to view sensitive information. Successful exploitation could allow an attacker to read encrypted credentials of other users on the switch, potentially leading to further unauthorized access or data breaches.
Solution
aruba-aos-cx-cve-2025-25042
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.