CVE-2022-23678

CVE-2022-23678 is a medium-severity vulnerability affecting Aruba Virtual Intranet Access (VIA) client for Microsoft Windows versions 4.3.0 build 2208101 and below. An attacker in a privileged network position could exploit this to intercept sensitive information due to a flaw in client communications. The CVSS score of 5.9 indicates a network-based attack with high complexity, requiring no user interaction, and resulting in high confidentiality impact. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.