Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.
2024-03-05T21:15:08.807
2025-07-28T13:02:28.593
Analyzed
CVSSv3.1: 3.7 (LOW)
| Type | Vendor | Product | Version/Range | Vulnerable? |
|---|---|---|---|---|
| Operating System | arubanetworks | arubaos | < 8.10.0.10 | Yes |
| Operating System | arubanetworks | arubaos | < 8.11.2.1 | Yes |
| Operating System | arubanetworks | arubaos | < 10.4.1.0 | Yes |
| Operating System | arubanetworks | arubaos | < 10.5.1.0 | Yes |