CVE-2024-25616 | THREATINT

Assigner	hpe
Reserved	2024-02-08
Published	2024-03-05
Updated	2024-11-07

Description

Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.

LOW: 3.7 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Product status

Default status

affected

ArubaOS 10.5.x.x: 10.5.0.1 and below

affected

ArubaOS 10.4.x.x: 10.4.0.3 and below

affected

ArubaOS 8.11.x.x: 8.11.2.0 and below

affected

ArubaOS 8.10.x.x: 8.10.0.9 and below

affected

Credits

Aruba Engineering reporter

References

https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-002.txt

cve.org CVE-2024-25616

nvd.nist.gov CVE-2024-25616

Download JSON

https://cve.threatint.com/CVE/CVE-2024-25616

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat

Subscribe to our newsletter to learn more about our work.