A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a malicious user obtain sensitive information. This interface listens on TCP port 15672 and 55672
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Airwave | Arubanetworks | * | 8.2.0.0 (excluding) |
| Aruba_instant | Arubanetworks | * | 4.1.3.0 (excluding) |
| Aruba_instant | Arubanetworks | 4.2.3.1 (including) | 4.2.3.1 (including) |
| Arubaos | Arubanetworks | * | * |