What’s Vulnerable › Vulnerabilities
CVE-2016-2032
- Severity: high (CVSS 7.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 2.7% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2020-01-31 · updated 2026-06-17
- Weakness: CWE-287
Description
A vulnerability exists in the Aruba AirWave Management Platform 8.x prior to 8.2 in the management interface of an underlying system component called RabbitMQ, which could let a malicious user obtain sensitive information. This interface listens on TCP port 15672 and 55672
Affected products
- Aruba AirWave Management Platform: before 8.2.0.0 — fixed in 8.2.0.0
- Arubanetworks Aruba Instant: before 4.1.3.0; 4.2.3.1 — fixed in 4.1.3.0
- Hewlett Packard Enterprise (HPE) ArubaOS (AOS): all versions
How to fix
Upgrade to a fixed version: Aruba AirWave Management Platform 8.2.0.0; Arubanetworks Aruba Instant 4.1.3.0. Check the vendor advisory for mitigations.
References
- http://packetstormsecurity.com/files/136997/Aruba-Authentication-Bypass-Insecure-Transport-Tons-Of-Issues.html
- http://seclists.org/fulldisclosure/2016/May/19
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-005.txt
- https://www.google.com/about/appsecurity/research/
- http://packetstormsecurity.com/files/136997/Aruba-Authentication-Bypass-Insecure-Transport-Tons-Of-Issues.html
- http://seclists.org/fulldisclosure/2016/May/19
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-005.txt
- https://www.google.com/about/appsecurity/research/
Get alerted when CVE-2016-2032 or the next vulnerability affects your stack