Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or earlier allows remote attackers to bypass authentication mechanisms and obtain management or VPN interface access.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Aruba_mobility_controllers | Aruba_networks | * | 2.4.8.11-fips (including) |
| Aruba_mobility_controllers | Aruba_networks | 2.3.6.15 (including) | 2.3.6.15 (including) |
| Aruba_mobility_controllers | Aruba_networks | 2.5.2.11 (including) | 2.5.2.11 (including) |
| Aruba_mobility_controllers | Aruba_networks | 2.5.4.25 (including) | 2.5.4.25 (including) |
| Aruba_mobility_controllers | Aruba_networks | 2.5.5.7 (including) | 2.5.5.7 (including) |
| Aruba_mobility_controllers | Aruba_networks | 3.1.1.3 (including) | 3.1.1.3 (including) |