PT-2014-7891 · Aruba · Arubaos
Published
2014-10-08
·
Updated
2014-10-08
·
CVE-2014-7299
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
ArubaOS versions 6.3.1.11 through 6.3.1.11-FIPS
ArubaOS versions 6.4.2.1 through 6.4.2.1-FIPS
Description
The issue allows remote attackers to bypass authentication and obtain potentially sensitive information or add guest accounts via an SSH session. This is due to an unspecified vulnerability in administrative interfaces.
Recommendations
For ArubaOS versions 6.3.1.11 through 6.3.1.11-FIPS, consider restricting access to administrative interfaces until a fix is available.
For ArubaOS versions 6.4.2.1 through 6.4.2.1-FIPS, consider disabling SSH sessions for administrative interfaces as a temporary workaround.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Arubaos