A security issue has been reported in Aruba Mobility Controller, which can be exploited by malicious people to bypass certain security restrictions.

The security issue is caused due to an error in the LDAP authentication component and can be exploited to gain access to the management or VPN interfaces of the Aruba Mobility Controller.

Successful exploitation requires that LDAP authentication is configured as an authentication method (this is not the default configuration).

The security issue affects versions 2.3.6.15, 2.5.2.11, 2.5.4.25, 2.5.5.7, 3.1.1.3, and 2.4.8.11-FIPS or prior.

Solution
Update to the latest firmware versions.
Further details available to Secunia VIM customers

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
AID-122207:
http://www.arubanetworks.com/support/alerts/aid-122207.asc

Deep Links
Links available to Secunia VIM customers