HPE Aruba Networking Private 5G Core Sensitive Information Exposure Vulnerability

A vulnerability exists in the APIs of HPE Aruba Networking Private 5G Core, versions 1.24.1.0 through 1.25.1.0, that could allow unauthorized users to access sensitive information. Exploitation of this vulnerability could enable an attacker to navigate the filesystem and download protected system files containing confidential data.

Impact

Successful exploitation allows for arbitrary file downloads, providing access to sensitive information.

Remediation

Users are advised to upgrade to HPE Aruba Networking Private 5G Core version 1.25.1.1 or above. For versions that have reached their End of Support milestone, no update is available.