CVE-2008-2273 - Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x,

CVE-2008-2273

Summary

Unspecified vulnerability in the TACACS authentication component in Aruba Mobility Controller 3.1.x, 3.2.x, and 3.3.x allows remote authenticated users to gain privileges via unknown vectors.

References

Vulnerable Configurations

cpe:2.3:o:arubanetworks:arubaos:3.1:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:3.1:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:3.2:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:3.2:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
cpe:2.3:o:arubanetworks:arubaos:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:aruba_mobility__controller:*:*:*:*:*:*:*:*
cpe:2.3:h:arubanetworks:aruba_mobility__controller:*:*:*:*:*:*:*:*

CVSS

Base:	9.0 (as of 11-10-2018 - 20:40)
Impact:
Exploitability:

CWE

NVD-CWE-noinfo

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	SINGLE

Impact

Confidentiality	Integrity	Availability
COMPLETE	COMPLETE	COMPLETE

cvss-vector via4

AV:N/AC:L/Au:S/C:C/I:C/A:C

refmap via4

bid	29240
bugtraq	20080515 Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities (Aruba Advisory ID: AID-051408)
confirm	http://www.arubanetworks.com/support/alerts/aid-051408.asc
sectrack	1020032
secunia	30262
xf	aruba-tacacs-security-bypass(42434)

Last major update

11-10-2018 - 20:40

Published

16-05-2008 - 12:54

Last modified

11-10-2018 - 20:40