PT-2008-1803 · Aruba · Aruba Mobility Controller

Robbie Gill · Publicado 2008-01-09 · Atualizado 2018-10-15 · CVE-2008-0150

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Aruba Mobility Controller versions 2.3.6.15 through 2.5.5.7 Aruba Mobility Controller version 2.4.8.11-FIPS

Description The issue concerns an unspecified vulnerability in the LDAP authentication feature. This vulnerability allows remote attackers to bypass authentication mechanisms, potentially obtaining management or VPN interface access.

Recommendations For Aruba Mobility Controller versions 2.3.6.15 through 2.5.5.7, update to a version later than 2.5.5.7 to resolve the issue. For Aruba Mobility Controller version 2.4.8.11-FIPS, update to a version later than 2.4.8.11-FIPS to resolve the issue.

Correção

Improper Authentication

Enumeração de Fraquezas

CWE-287

Identificadores relacionados

CVE-2008-0150

Produtos afetados

Aruba Mobility Controller

Referências · 7

• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0150 · Nota
• http://securityreason.com/securityalert/3529 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-0150 · Nota de Segurança
• http://securityfocus.com/bid/27144 · Nota
• http://arubanetworks.com/support/alerts/aid-122207.asc · Nota
• http://securityfocus.com/archive/1/485831/100/0/threaded · Nota
• http://secunia.com/advisories/28357 · Aviso do Fabricante