PT-2009-2492 · Aruba · Aruba Mobility Controller

Published 2009-08-21 · Updated 2018-10-11 · CVE-2008-7023

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Aruba Mobility Controller version 3.3.1.16

Description The issue allows remote attackers to bypass authentication because the same default X.509 certificate is installed for all installations. This is only considered a problem when the administrator fails to follow the recommendations outlined in the product's security documentation.

Recommendations For version 3.3.1.16, ensure that administrators follow the security documentation recommendations to avoid this issue. As a temporary workaround, consider regenerating or replacing the default X.509 certificate with a unique one to prevent authentication bypass.

Fix

Weakness Enumeration

CWE-310

Related Identifiers

CVE-2008-7023

Affected Products

Aruba Mobility Controller

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2008-7023 · Security Note
• http://osvdb.org/51731 · Note
• http://securityfocus.com/archive/1/496622/100/0/threaded · Note
• http://securityfocus.com/bid/31336 · Note
• http://securityfocus.com/archive/1/496604/100/0/threaded · Note