Unspecified vulnerability in the LDAP authentication feature in Aruba Mobility Controller 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or earlier allows remote attackers to bypass authentication mechanisms and obtain management or VPN interface access.
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/27144 | vdb entry |
http://secunia.com/advisories/28357 | third party advisory vendor advisory |
http://www.securityfocus.com/archive/1/485831/100/0/threaded | mailing list |
http://securityreason.com/securityalert/3529 | third party advisory |
http://www.arubanetworks.com/support/alerts/aid-122207.asc |