Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Arubaos | Arubanetworks | 8.10.0.0 (including) | 8.10.0.10 (excluding) |
| Arubaos | Arubanetworks | 8.11.0.0 (including) | 8.11.2.1 (excluding) |
| Arubaos | Arubanetworks | 10.4.0.0 (including) | 10.4.1.0 (excluding) |
| Arubaos | Arubanetworks | 10.5.0.0 (including) | 10.5.1.0 (excluding) |