3.7
Faible
CVE-2024-25616 Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in…
Description
Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| ArubaOS Wi-Fi Controllers and Campus/Remote Access Points | Versions non publiées |
Autres CVE de ArubaOS Wi-Fi Controllers and Campus/Remote Access Points
Les 7 CVE de ArubaOS Wi-Fi Controllers and Campus/Remote Access Points →
CVE-2024-25615
An unauthenticated Denial-of-Service (DoS) vulnerability exists in the Spectrum service accessed via the PAPI protocol…
5.3
Moyenne
CVE-2024-25614
There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS
5.5
Moyenne
CVE-2024-25613
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
7.2
Élevée
CVE-2024-25612
Authenticated command injection vulnerabilities exist in the ArubaOS command line interface
7.2
Élevée