CVE-2025-37100

{"id": "CVE-2025-37100", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "security-alert@hpe.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.7, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 4.0, "exploitabilityScore": 3.1}]}, "published": "2025-06-10T15:15:24.233", "references": [{"url": "https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04883en_us&docLocale=en_US", "source": "security-alert@hpe.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-22"}, {"lang": "en", "value": "CWE-922"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability in the APIs of HPE Aruba Networking Private 5G Core\u00a0could potentially expose sensitive information to unauthorized users. \nA successful exploitation could allow an attacker to iteratively navigate through the filesystem and ultimately download protected system files containing sensitive information."}, {"lang": "es", "value": "Una vulnerabilidad en las API de HPE Aruba Networking Private 5G Core podr\u00eda exponer informaci\u00f3n confidencial a usuarios no autorizados. Una explotaci\u00f3n exitosa podr\u00eda permitir a un atacante navegar iterativamente por el sistema de archivos y, en \u00faltima instancia, descargar archivos protegidos del sistema que contienen informaci\u00f3n confidencial."}], "lastModified": "2025-06-12T16:06:39.330", "sourceIdentifier": "security-alert@hpe.com"}