cve/2016/CVE-2016-2031.md

CVE-2016-2031

Description

Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions and execute arbitrary code.

POC

Reference

• http://packetstormsecurity.com/files/136997/Aruba-Authentication-Bypass-Insecure-Transport-Tons-Of-Issues.html
• http://seclists.org/fulldisclosure/2016/May/19

Github

• https://github.com/ARPSyndicate/cvemon