Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.
| Software | From | Fixed in |
|---|---|---|
| arubanetworks / arubaos | 10.4.0.0 | 10.4.1.0 |
| arubanetworks / arubaos | 10.5.0.0 | 10.5.1.0 |
| arubanetworks / arubaos | 8.10.0.0 | 8.10.0.10 |
| arubanetworks / arubaos | 8.11.0.0 | 8.11.2.1 |