Aruba Networks ClearPass Access Control Error Vulnerability

Aruba Networks ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. A security vulnerability exists in Aruba Networks ClearPass versions 6.8.x prior to 6.8.4 and 6.7.x prior to 6.7.13. An attacker could explo...

Aruba Networks ClearPass Code Execution Vulnerability

Aruba Networks ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. A security vulnerability exists in Aruba Networks ClearPass. An attacker could exploit the vulnerability to execute code...

Aruba Networks ClearPass Cross-Site Scripting Vulnerability (CNVD-2020-33639)

Aruba Networks ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. A cross-site scripting vulnerability exists in Aruba Networks ClearPass. The vulnerability stems from a lack of proper validation of...

Aruba Networks ClearPass Information Disclosure Vulnerability (CNVD-2020-33640)

Aruba Networks ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. An information disclosure vulnerability exists in Aruba Networks ClearPass versions 6.8.x prior to 6.8.4 and 6.7.x prior to 6.7.13. An...

PT-2020-19380

Name of the Vulnerable Software and Affected Versions Aruba ClearPass versions prior to 6.7.10 Aruba ClearPass versions prior to 6.8.1 Aruba ClearPass versions prior to 6.9.0 Description A vulnerability was found in the ClearPass management interface, allowing an attacker to intercept and modify...

CVE-2019-5326

An administrative application user of or application user with write access to Aruba Airwave VisualRF is able to obtain code execution on the AMP platform. This is possible due to the ability to overwrite a file on disk which is subsequently deserialized by the Java application component...

CVE-2019-5326

An administrative application user of or application user with write access to Aruba Airwave VisualRF is able to obtain code execution on the AMP platform. This is possible due to the ability to overwrite a file on disk which is subsequently deserialized by the Java application component...

CVE-2019-5326

CVE-2019-5326 affects Aruba Airwave VisualRF with code execution on the AMP platform due to the ability to overwrite a disk file that is later deserialized by a Java component. The vulnerability arises from improper deserialization of a file write, enabling an administrative user with write acces...

CVE-2019-5326: Deserialization of Untrusted Data

An administrative application user of or application user with write access to Aruba Airwave VisualRF is able to obtain code execution on the AMP platform. This is possible due to the ability to overwrite a file on disk which is subsequently deserialized by the Java application component...

PT-2020-11117

Name of the Vulnerable Software and Affected Versions Aruba Airwave VisualRF affected versions not specified Description The issue allows an administrative application user or an application user with write access to obtain code execution on the AMP platform. This is achieved by overwriting a fil...

PT-2020-11115

Name of the Vulnerable Software and Affected Versions Aruba AirWave affected versions not specified Description The issue is related to command injection vulnerabilities in the AirWave application. It is caused by certain input fields controlled by an administrative user not being properly...

CVE-2019-5322

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007 and 16.10. before 16.10.0003...

CVE-2019-5322

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007 and 16.10. before 16.10.0003...

Information disclosure

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007 and 16.10. before 16.10.0003...

CVE-2019-5322

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007 and 16.10. before 16.10.0003...

CVE-2019-5322

CVE-2019-5322 affects Aruba Intelligent Edge Switches (models 5400, 3810, 2920, 2930, 2530 with GigT, 2530 10/100, or 2540). The vulnerability exists in firmware 16.08.* before 16.08.0009, 16.09.* before 16.09.0007, and 16.10.* before 16.10.0003 and allows an attacker to retrieve sensitive system...

CVE-2019-5322: Undefined Security Weakness

A remotely exploitable information disclosure vulnerability is present in Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540. The vulnerability impacts firmware 16.08. before 16.08.0009, 16.09. before 16.09.0007 and 16.10. before 16.10.0003...

PT-2020-11114

Name of the Vulnerable Software and Affected Versions Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, or 2540 versions 16.08. through 16.08.0008 Aruba Intelligent Edge Switch models 5400, 3810, 2920, 2930, 2530 with GigT port, 2530 10/100 port, ...

CVE-2016-2032

A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a malicious user obtain sensitive information. This interface listens on TCP port 15672 and 55672...

CVE-2016-2031

Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions...