Arubanetworks: >> Arubaos Security Vulnerabilities
Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.
CVSS Score
10.0
EPSS Score
0.018
Published
2009-08-21
Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x allows remote authenticated users to gain privileges via unknown vectors.
CVSS Score
9.0
EPSS Score
0.023
Published
2008-05-16
Page 24