This CVE describes a flaw in the web‑based management interface of ArubaOS (AOS) 8 that allows an unauthenticated adjacent attacker to bypass existing authentication controls and retrieve sensitive information in cleartext, which could expose details of other network infrastructure to further compromise.

The affected vendor is Hewlett Packard Enterprise. The specific product is ArubaOS (AOS). No version information is provided, implying that any unpatched AOS‑8 deployment may be vulnerable.

With a CVSS score of 8.2, the vulnerability is considered high severity. The EPSS score is < 1% and it is not listed in CISA KEV, indicating low likelihood of exploitation. The likely attack vector is a local or adjacent network attacker who can reach the web‑based management interface; such an attacker can bypass authentication and access sensitive information in cleartext.