{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-09-21T13:41:44.164","vulnerabilities":[{"cve":{"id":"CVE-2022-43529","sourceIdentifier":"security-alert@hpe.com","published":"2023-01-05T07:15:12.280","lastModified":"2026-06-17T05:06:46.567","vulnStatus":"Modified","cveTags":[],"descriptions":[{"lang":"en","value":"A vulnerability in the web-based management interface of Aruba EdgeConnect Enterprise Orchestrator could allow an remote attacker to persist a session after a password reset or similar session clearing event. Successful exploitation of this vulnerability could allow an authenticated attacker to remain on the system with the permissions of their current session after the session should be invalidated  in Aruba EdgeConnect Enterprise Orchestration Software version(s): Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators - Orchestrator 9.2.1.40179 and below, - Orchestrator 9.1.4.40436 and below, - Orchestrator 9.0.7.40110 and below, - Orchestrator 8.10.23.40015 and below, - Any older branches of Orchestrator not specifically mentioned.\n\n"},{"lang":"es","value":"Una vulnerabilidad en la interfaz de administración basada en web de Aruba EdgeConnect Enterprise Orchestrator podría permitir que un atacante remoto persista en una sesión después de un restablecimiento de contraseña o un evento similar de borrado de sesión. La explotación exitosa de esta vulnerabilidad podría permitir que un atacante autenticado permanezca en el sistema con los permisos de su sesión actual después de que la sesión se invalide en las versiones del software Aruba EdgeConnect Enterprise Orchestration: Aruba EdgeConnect Enterprise Orchestrator (local), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP y Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators - Orchestrator 9.2.1.40179 y versiones anteriores, - Orchestrator 9.1.4.40436 y versiones anteriores, - Orchestrator 9.0.7.40110 y versiones anteriores, - Orchestrator 8.10.23.40015 y versiones anteriores: cualquier rama anterior de Orchestrator que no se mencione específicamente."}],"affected":[{"source":"security-alert@hpe.com","affectedData":[{"vendor":"Hewlett Packard Enterprise (HPE)","product":"Aruba EdgeConnect Enterprise Orchestration Software","defaultStatus":"unaffected","versions":[{"version":"Aruba EdgeConnect Enterprise Orchestrator (on-premises), Aruba EdgeConnect Enterprise Orchestrator-as-a-Service, Aruba EdgeConnect Enterprise Orchestrator-SP and Aruba EdgeConnect Enterprise Orchestrator Global Enterprise Tenant Orchestrators - Orchestrator 9.2.1.40179 and below, - Orchestrator 9.1.4.40436 and below, - Orchestrator 9.0.7.40110 and below, - Orchestrator 8.10.23.40015 and below, - Any older branches of Orchestrator not specifically mentioned.","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"security-alert@hpe.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N","baseScore":4.6,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"REQUIRED","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.1,"impactScore":2.5},{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"LOW","integrityImpact":"LOW","availabilityImpact":"NONE"},"exploitabilityScore":2.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-10T16:07:13.089329Z","id":"CVE-2022-43529","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"nvd@nist.gov","type":"Primary","description":[{"lang":"en","value":"CWE-384"}]},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary","description":[{"lang":"en","value":"CWE-384"}]}],"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:on-premises:*:*:*","versionEndIncluding":"8.10.23.40015","matchCriteriaId":"C105433F-3477-4632-A192-672219AF0CEA"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:on-premises:*:*:*","versionStartIncluding":"9.0.0","versionEndIncluding":"9.0.7.40110","matchCriteriaId":"BB3793BE-F70F-4495-9911-5900FD0C1BCB"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:on-premises:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.4.40436","matchCriteriaId":"C58AD722-2552-4D6B-A390-DDCEBE5F3726"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:on-premises:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.1.40179","matchCriteriaId":"541AC697-70DD-4832-8DDE-D1EA38A1A880"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:as-a-service:*:*:*","versionEndIncluding":"8.10.23.40015","matchCriteriaId":"B2F6BAE3-54F7-45EB-984C-0B08832867A6"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:as-a-service:*:*:*","versionStartIncluding":"9.0.0","versionEndIncluding":"9.0.7.40110","matchCriteriaId":"1003D598-16E2-4574-B3BB-D1466EA9ECFA"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:as-a-service:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.4.40436","matchCriteriaId":"84E2C92F-3A9C-4072-9B1D-641C465933BD"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:as-a-service:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.1.40179","matchCriteriaId":"AB3DB912-1729-498E-8488-6BC653612C6F"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:global_enterprise_tenant_orchestrators:*:*:*","versionEndIncluding":"8.10.23.40015","matchCriteriaId":"FB9D2623-6A8D-44D7-91BD-ED949A038093"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:global_enterprise_tenant_orchestrators:*:*:*","versionStartIncluding":"9.0.0","versionEndIncluding":"9.0.7.40110","matchCriteriaId":"4D27B112-874D-409F-88E4-1ECAE1C6C12E"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:global_enterprise_tenant_orchestrators:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.4.40436","matchCriteriaId":"FB5C1812-258C-4160-AA43-A2055356C74B"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:global_enterprise_tenant_orchestrators:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.1.40179","matchCriteriaId":"A5211AA6-5C28-4613-BD9A-96A644F84D03"}]}]},{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:sp:*:*:*","versionEndIncluding":"8.10.23.40015","matchCriteriaId":"4F8E179A-99CE-4AA3-98F6-D7EC673789A1"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:sp:*:*:*","versionStartIncluding":"9.0.0","versionEndIncluding":"9.0.7.40110","matchCriteriaId":"CCE867DF-E468-460D-B016-5AE6929512FD"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:sp:*:*:*","versionStartIncluding":"9.1.0","versionEndIncluding":"9.1.4.40436","matchCriteriaId":"9213A4AD-3468-498C-8462-36BBF49FC7CA"},{"vulnerable":true,"criteria":"cpe:2.3:a:arubanetworks:aruba_edgeconnect_enterprise_orchestrator:*:*:*:*:sp:*:*:*","versionStartIncluding":"9.2.0","versionEndIncluding":"9.2.1.40179","matchCriteriaId":"E23CDE96-A543-4075-B5CB-60EC87F5A4A3"}]}]}],"references":[{"url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-021.txt","source":"security-alert@hpe.com","tags":["Mitigation","Vendor Advisory"]},{"url":"https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-021.txt","source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mitigation","Vendor Advisory"]}]}}]}