CVE-2008-7023 Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authenticati...
HighCVSS 10.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| arubanetworks aruba mobility controller | All versions | No fix listed |
| arubanetworks arubaos | = 3.3.1.16 | No fix listed |
References
- 51731 vdb-entry
- 20080923 Aruba Mobility Controller Shared Default Certificate mailing-list
- 20080923 Re: Aruba Mobility Controller Shared Default Certificate - Response from Aruba Networks mailing-list
- 31336 vdb-entry