CVEvulnerability
CVE-2024-25616
3.7 LOW
Official page ↗
- Status
- Analyzed
- Published
- 2024-03-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
- CVSS 3.1 ([email protected])
- 3.7 LOW — CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N
Description
Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.
Affected configurations
• arubanetworks arubaos (>= 8.10.0.0 < 8.10.0.10)
• arubanetworks arubaos (>= 8.11.0.0 < 8.11.2.1)
• arubanetworks arubaos (>= 10.4.0.0 < 10.4.1.0)
• arubanetworks arubaos (>= 10.5.0.0 < 10.5.1.0)