CVE-2008-7023 - CVE House
Back to Database
Status published Critical CVE-2008-7023

Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions,...

Vulnerability Description

Aruba Mobility Controller running ArubaOS 3.3.1.16, and possibly other versions, installs the same default X.509 certificate for all installations, which allows remote attackers to bypass authentication. NOTE: this is only a vulnerability when the administrator does not follow recommendations in the product's security documentation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2008-7023

Credits & Attribution

No credits recorded in the NVD database.

References

More from arubanetworks

View All →
CVE-2018-16417
Aruba Instant 4.x prior to 6.4.4.8-4.2.4.12, 6.5.x prior to 6.5.4.11,...
High 7.5
CVE-2016-4401
Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2...
Critical 9.8
CVE-2016-2034
SQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6...
Critical 9.8
CVE-2016-2032
A vulnerability exists in the Aruba AirWave Management Platform 8.x...
High 7.5
CVE-2016-2031
Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1...
Critical 9.8

Affected Vendor

arubanetworks

View all reports →

Affected Software

aruba mobility controller, arubaos
Vulnerable Versions:
3.3.1.16

Timeline

Official Publish: August 21st, 2009
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.