Mitchell Pompe

**Name of the Vulnerable Software and Affected Versions** ArubaOS (affected versions not specified) **Description** The issue is related to an insufficient session expiration in the command line interface of ArubaOS. This allows an attacker to maintain a session on an affected device even after the account associated with the session has been removed. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.