This vulnerability affects the graphical user interface of HPE Aruba Networking Private 5G Core On-Prem version 1.0.0.0. It involves an open redirect in the login flow that can be exploited by an attacker through a specially crafted URL. When an authenticated user follows this URL, they may be redirected to an attacker-controlled server presenting a fake login page designed to capture user credentials. After credential submission, the user is redirected back to the legitimate login page, potentially without suspicion. The CVSS 3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and no known exploits in the wild have been reported.

Successful exploitation can lead to credential theft by tricking authenticated users into submitting their login credentials to a spoofed page controlled by an attacker. This compromises user authentication and may allow unauthorized access to the Private 5G Core system. The vulnerability affects confidentiality, integrity, and availability as indicated by the CVSS vector. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be cautious about clicking on unexpected or suspicious URLs related to the HPE Private 5G Core login interface. Implementing user awareness training to recognize phishing attempts may help mitigate risk. Monitor official HPE channels for updates or patches addressing this vulnerability.