An insufficient session expiration vulnerability exists in the ArubaOS command line interface. Successful exploitation of this vulnerability allows an attacker to keep a session running on an affected device after the removal of the impacted account
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2023-002.txt