critical10.0
CVE-2008-7023
Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allow…
Impact
Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arubanetworks | Aruba Mobility Controller | All versions |
| Arubanetworks | Arubaos | Version 3.3.1.16 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/51731
- http://www.securityfocus.com/archive/1/496604/100/0/threaded
- http://www.securityfocus.com/archive/1/496622/100/0/threaded
- http://www.securityfocus.com/bid/31336
- http://osvdb.org/51731
- http://www.securityfocus.com/archive/1/496604/100/0/threaded
- http://www.securityfocus.com/archive/1/496622/100/0/threaded
- http://www.securityfocus.com/bid/31336