Description
Multiple cross-site scripting (XSS) vulnerabilities in the web interface in Aruba Mobility Controller 2.4.8.x-FIPS, 2.5.5.x, 2.5.6.x, 3.1.1.x, 3.2.0.x, and 3.3.1.x allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.
References
- http://www.arubanetworks.com/support/alerts/aid-051408.asc
- 1020033 vdb-entry
- 20080515 Aruba Mobility Controller TACACS User Authentication and Cross Site Scripting Vulnerabilities (Aruba Advisory ID: AID-051408) mailing-list
- aruba-webui-xss(42433) vdb-entry
- 29240 vdb-entry
- 30262 third-party-advisory