VYPR
← All advisories
Unrated severityNVD Advisory· Published Aug 21, 2009· Updated Jun 16, 2026

CVE-2008-7023

CVE-2008-7023

Description

Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.

Affected products

3
  • Arubanetworks/Mobility Controller2 versions
    cpe:2.3:h:arubanetworks:aruba_mobility_controller:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:h:arubanetworks:aruba_mobility_controller:-:*:*:*:*:*:*:*
    • (no CPE)range: 3.3.1.16
  • Arubanetworks/Arubaos
    cpe:2.3:o:arubanetworks:arubaos:3.3.1.16:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.