Aruba MC-800 Mobility Controller Screens Directory HTML Injection Vulnerability

Bugtraq ID:	26465
Class:	Input Validation Error
CVE:	CVE-2007-6054
Remote:	Yes
Local:	No
Published:	Nov 15 2007 12:00AM
Updated:	Mar 19 2015 09:15AM
Credit:	Jan Fry of ProCheckUp Ltd is credited with the discovery of this vulnerability.
Vulnerable:	Aruba Networks Aruba Mobility Controller 800 2.5.4.17 Aruba Networks Aruba Mobility Controller 800 2.4.8.6 Aruba Networks Aruba Mobility Controller 800
Not Vulnerable:	Aruba Networks Aruba Mobility Controller 800 2.5.4.18 Aruba Networks Aruba Mobility Controller 800 2.4.8.6-FIPS

Aruba MC-800 Mobility Controller Screens Directory HTML Injection Vulnerability

Aruba MC-800 Mobility Controller is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue may allow an attacker to execute HTML and script code in the context of the affected site, to steal cookie-based authentication credentials, or to control how the site is rendered to the user; other attacks are also possible.

Aruba MC-800 Mobility Controller Screens Directory HTML Injection Vulnerability

Attackers can exploit this issue via a browser.

The following proof-of-concept URI is available:

• /data/vulnerabilities/exploits/26465.html

Aruba MC-800 Mobility Controller Screens Directory HTML Injection Vulnerability

Solution:
The vendor released updates to address this issue. Please see the references for more information.

Aruba MC-800 Mobility Controller Screens Directory HTML Injection Vulnerability

References:

• Aruba Networks Homepage (Aruba Networks)
  
• PR07-26: Persistent XSS on Aruba 800 Mobility Controller's login page (ProCheckUp)
  
• PR07-26: Persistent XSS on Aruba 800 Mobility Controller's login page ([email protected] )
  
• Aruba Mobility Controller Management Interface Login Pages Cross-Site Scripting (Aruba Networks)