CVE-2016-2032

published 2020-01-31

CVE-2016-2032: A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ…

Priority P3 42 high 7.5 CVSS 3.1

AV N AC L PR N UI N S U C H I N A N

A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a malicious user obtain sensitive information. This interface listens on TCP port 15672 and 55672

Affected

3 ranges

Vendor	Product	Version range	Fixed in
arubanetworks	airwave	< 8.2.0.0	8.2.0.0
arubanetworks	aruba_instant	< 4.1.3.0	4.1.3.0
arubanetworks	aruba_instant	—	—

CVSS provenance

nvd v3.1 7.5 HIGH CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

nvd v2.0 5.0 MEDIUM AV:N/AC:L/Au:N/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-287