CVE-2022-37916: 
NixOS vulnerability analysis and mitigation

Vulnerabilities in the AirWave Management Platform web-based management interface exist which expose some URLs to a lack of proper access controls. This vulnerability (CVE-2022-37916) affects Aruba AirWave Management Platform version 8.2.15.0 and below, allowing remote attackers with limited privileges to gain unauthorized access to sensitive information and elevate their privileges (NVD).

The vulnerability has been assigned a CVSS v3.1 Base Score of 8.1 (HIGH) with the following vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N. This indicates that the vulnerability is network exploitable, requires low attack complexity, requires low privileges, needs no user interaction, has unchanged scope, and can result in high confidentiality and integrity impact, with no availability impact (NVD).

The vulnerability could allow a remote attacker with limited privileges to gain access to sensitive information and/or change network configurations with privileges at a higher effective level in the AirWave Management Platform (NVD).

Aruba has released security updates to address this vulnerability. Users should upgrade to a version newer than AirWave Management Platform 8.2.15.0 (Aruba Advisory).