CVE-2008-0150

Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or earlier allows remote attackers to bypass authentication mechanisms and obtain management or VPN interface access.

Score

CVSS 2.0 6.8 Medium

Status

Modified - cve@mitre.org

Published

2008-01-09

Last modified

2024-08-07

Weaknesses

CWE-287

Affected products

• Aruba Mobility Controllers (Aruba Networks)

References

• http://secunia.com/advisories/28357
• http://securityreason.com/securityalert/3529
• http://www.arubanetworks.com/support/alerts/aid-122207.asc
• http://www.securityfocus.com/archive/1/485831/100/0/threaded
• http://www.securityfocus.com/bid/27144