PT-2009-2492 · Aruba · Aruba Mobility Controller

Publicado 2009-08-21 · Atualizado 2018-10-11 · CVE-2008-7023

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Aruba Mobility Controller version 3.3.1.16

Description The issue allows remote attackers to bypass authentication because the same default X.509 certificate is installed for all installations. This is only considered a problem when the administrator fails to follow the recommendations outlined in the product's security documentation.

Recommendations For version 3.3.1.16, ensure that administrators follow the security documentation recommendations to avoid this issue. As a temporary workaround, consider regenerating or replacing the default X.509 certificate with a unique one to prevent authentication bypass.

Correção

Enumeração de Fraquezas

CWE-310

Identificadores relacionados

CVE-2008-7023

Produtos afetados

Aruba Mobility Controller

Referências · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-7023 · Nota de Segurança
• http://osvdb.org/51731 · Nota
• http://securityfocus.com/archive/1/496622/100/0/threaded · Nota
• http://securityfocus.com/bid/31336 · Nota
• http://securityfocus.com/archive/1/496604/100/0/threaded · Nota