Back to search
CVE-2019-5314
Published: Sep 13, 2019
Modified: Aug 4, 2024
PUBLISHED
Description
Some web components in the ArubaOS software are vulnerable to HTTP Response splitting (CRLF injection) and Reflected XSS. An attacker would be able to accomplish this by sending certain URL parameters that would trigger this vulnerability.
| Vendor | Product | Versions |
|---|---|---|
n/a | Aruba Mobility Controllers | affected Aruba Mobility Controller firmware (ArubaOS) 6.x prior to 6.4.4.21 6.5.x prior to 6.5.4.13 8.x prior to 8.2.2.6 8.3.0.x prior to 8.3.0.7, 8.4.0.x and prior to 8.4.0.3 |
References
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2019-004.txt
x_refsource_CONFIRM
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now