CVE-2014-7299

Unspecified vulnerability in administrative interfaces in ArubaOS 6.3.1.11, 6.3.1.11-FIPS, 6.4.2.1, and 6.4.2.1-FIPS on Aruba controllers allows remote attackers to bypass authentication, and obtain potentially sensitive information or add guest accounts, via an SSH session.

Score

CVSS 2.0 7.5 High

Status

Modified - cve@mitre.org

Published

2014-10-08

Last modified

2024-08-06

Affected products

• Arubaos (Arubanetworks)

References

• http://www.arubanetworks.com/support/alerts/aid-10072014.txt