CVE-2022-23678 : A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communic

A vulnerability in the Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system client communications that could allow for an attacker in a privileged network position to intercept sensitive information in Aruba Virtual Intranet Access (VIA) client for Microsoft Windows operating system versions: 4.3.0 build 2208101 and below. Aruba has released upgrades for Virtual Intranet Access (VIA) Client that address this security vulnerability.

Published 2022-09-06 18:15:11

Updated 2022-09-13 15:02:36

Source Hewlett Packard Enterprise (HPE)

View at NVD, CVE.org

Exploit prediction scoring system (EPSS) score for CVE-2022-23678

EPSS FAQ

0.17%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 52 %

Percentile, the proportion of vulnerabilities that are scored at or less

CVSS scores for CVE-2022-23678

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source	First Seen
5.9	MEDIUM	CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N	2.2	3.6	NIST
Attack Vector: Network Attack Complexity: High Privileges Required: None User Interaction: None Scope: Unchanged Confidentiality: High Integrity: None Availability: None

Products affected by CVE-2022-23678

HP » Aruba Virtual Intranet Access
Versions before (<) 4.3.0
cpe:2.3:a:hp:aruba_virtual_intranet_access:*:*:*:*:*:*:*:*
Matching versions
When used together with: Microsoft » Windows » Version: N/A

Vulnerability Details : CVE-2022-23678

Exploit prediction scoring system (EPSS) score for CVE-2022-23678

CVSS scores for CVE-2022-23678

References for CVE-2022-23678

Products affected by CVE-2022-23678