Security Advisory

CVE-2019-5323

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-02-27 16:20:29
Last updated 2024-08-04 19:54:53
Assigner hpe
CVSS score not scored
State PUBLISHED

Description

There are command injection vulnerabilities present in the AirWave application. Certain input fields controlled by an administrative user are not properly sanitized before being parsed by AirWave. If conditions are met, an attacker can obtain command execution on the host.