Description
Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions and execute arbitrary code.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://packetstormsecurity.com/files/136997/Aruba-Authentication-Bypass-Insecure-Transport-Tons-Of-Issues.html ↗
- http://seclists.org/fulldisclosure/2016/May/19 ↗
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-004.txt ↗
- https://www.securityfocus.com/bid/90207 ↗
- https://cert-portal.siemens.com/productcert/pdf/ssa-431802.pdf ↗