Aruba Instant Information Disclosure Vulnerability

Aruba Instant is a cloud-hosted controller-less wireless access point. An information disclosure vulnerability exists in Aruba Instant. The vulnerability stems from the fact that a process running in Aruba Instant may crash leaving a "core dump" containing the contents of the process's memory at...

CVE-2018-7083: Exposure of Sensitive Information to an Unauthorized Actor

If a process running within Aruba Instant crashes, it may leave behind a "core dump", which contains the memory contents of the process at the time it crashed. It was discovered that core dumps are stored in a way that unauthenticated users can access them through the Aruba Instant web interface...

PT-2019-2099

Name of the Vulnerable Software and Affected Versions Aruba Instant versions prior to 4.2.4.12 Aruba Instant versions prior to 6.5.4.11 Aruba Instant versions prior to 8.3.0.6 Aruba Instant versions prior to 8.4.0.0 Description The issue is related to the disclosure of information when a process...

PT-2019-2097

Name of the Vulnerable Software and Affected Versions Aruba Instant versions prior to 4.2.4.12 Aruba Instant versions prior to 6.5.4.11 Aruba Instant versions prior to 8.3.0.6 Aruba Instant versions prior to 8.4.0.0 SCALANCE affected versions not specified Description A reflected cross-site...

CVE-2018-7064: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability is present in an unauthenticated Aruba Instant web interface. An attacker could use this vulnerability to trick an IAP administrator into clicking a link which could then take administrative actions on the Instant cluster, or expose the session...

CVE-2018-7082: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability is present in Aruba Instant that permits an authenticated administrative user to execute arbitrary commands on the underlying operating system. A malicious administrator could use this ability to install backdoors or change system configuration in a way that woul...

CVE-2018-7084: Improper Neutralization of Special Elements used in an OS Command

A command injection vulnerability is present that permits an unauthenticated user with access to the Aruba Instant web interface to execute arbitrary system commands within the underlying operating system. An attacker could use this ability to copy files, read configuration, write files, delete...

PT-2019-2100 · Aruba · Aruba Instant

Name of the Vulnerable Software and Affected Versions: Aruba Instant versions prior to 4.2.4.12 Aruba Instant versions prior to 6.5.4.11 Aruba Instant versions prior to 8.3.0.6 Aruba Instant versions prior to 8.4.0.1 Description: A command injection vulnerability is present that permits an...

PT-2019-2098 · Aruba +1 · Aruba Instant +1

Name of the Vulnerable Software and Affected Versions: Aruba Instant versions prior to 4.2.4.12 Aruba Instant versions prior to 6.5.4.11 Aruba Instant versions prior to 8.3.0.6 Aruba Instant versions prior to 8.4.0.0 SCALANCE affected versions not specified Description: A command injection issue...

Aruba VAN SDN Controller Detection

Binary data arubavansdncontrollerdetect.nbin...

Aruba VAN SDN default credentials

The Aruba Virtual Application Networks VAN Software Defined Networking SDN controller running on the remote host is configured with default credentials. A default service token is configured or the 'sdn' account is using a default password. An unauthenticated, remote attacker can exploit this to...

RSA Conference 2019: BleedingBit Flaws Continue to Plague Firms

UPDATE SAN FRANCISCO – Mobile key platform UniKey has patched vulnerabilities related to the infamous BleedingBit attack in its platform. BleedingBit is an issue in Bluetooth Low-Energy chips made by Texas Instruments and used in millions of wireless access points, which was disclosed in November...

Aruba ClearPass Policy Manager Detection

Binary data arubaclearpasspolmandetect.nbin...

Unspecified Vulnerability in Aruba ClearPass Policy Manager

Aruba ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The system manages everything related to BYOD Bring Your Own Device in a single location.Policy Manager is one of the policy managers. A security...

Aruba ClearPass Policy Manager SQL Injection Vulnerability

Aruba ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The system manages everything related to BYOD Bring Your Own Device in a single location.Policy Manager is one of the policy managers. An SQL injecti...

Aruba ClearPass Policy Manager Command Execution Vulnerability

Aruba ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The system manages everything related to BYOD Bring Your Own Device in a single location.Policy Manager is one of the policy managers. A security...

Aruba ClearPass Policy Manager Authentication Bypass Vulnerability

Aruba ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The system manages everything related to BYOD Bring Your Own Device in a single location.Policy Manager is one of the policy managers. A security...

CVE-2018-7063

In Aruba ClearPass, disabled API admins can still perform read/write operations. In certain circumstances, API admins in ClearPass which have been disabled may still be able to perform read/write operations on parts of the XML API. This can lead to unauthorized access to the API and complete...

CVE-2018-7065

An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this...

CVE-2018-7067

A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise. An authentication flaw in all versions of ClearPass could allow an attacker to compromise the entire cluster through a specially crafted API call. Network access to the administrative web...