This vulnerability (CWE-601) affects the graphical user interface of HPE Aruba Networking Private 5G Core On-Prem version 1.0.0.0. It allows an attacker to abuse an open redirect in the login flow by using a specially crafted URL. When exploited, an authenticated user can be redirected to an attacker-controlled site with a spoofed login page designed to capture credentials. After credential capture, the user is redirected back to the legitimate login page, increasing the likelihood of successful phishing. The CVSS v3.1 base score is 8.8, indicating high impact on confidentiality, integrity, and availability. No official remediation or patch has been disclosed by HPE as of the published date.

Successful exploitation can lead to credential theft through phishing by redirecting authenticated users to attacker-controlled spoofed login pages. This compromises user credentials, potentially allowing unauthorized access to the Private 5G Core system. The vulnerability impacts confidentiality, integrity, and availability as reflected in the CVSS score. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should be cautious of unexpected redirects during login and verify URLs before entering credentials. Network administrators should monitor for suspicious login flow behavior and consider additional user training on phishing risks related to this vulnerability.