CVE-2023-22791

A vulnerability exists in Aruba InstantOS and ArubaOS 10where an edge-case combination of network configuration, aspecific WLAN environment and an attacker already possessingvalid user credentials on that WLAN can lead to sensitiveinformation being disclosed via the WLAN. The scenarios inwhich this disclosure of potentially sensitive informationcan occur are complex and depend on factors that are beyondthe control of the attacker.