CVE-2008-2273 Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x allows remote authenticated users to gain privileges via unknown vectors.
HighCVSS 9.0
EPSS 2.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x allows remote authenticated users to gain privileges via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arubanetworks arubaos | <= 3.3 | No fix listed |
| arubanetworks arubaos | = 3.1 | No fix listed |
| arubanetworks arubaos | = 3.2 | No fix listed |
References
- 30262 third-party-advisory vendor-advisory
- www.arubanetworks.com
- 20080515 Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities (Aruba Advisory ID: AID-051408) mailing-list
- 29240 vdb-entry
- 1020032 vdb-entry
- aruba-tacacs-security-bypass(42434) vdb-entry