CVE-2024-25616

LowCVSS 3.7/10Last modified Jun 17, 2026

Description

Aruba has identified certain configurations of ArubaOS that can lead to partial disclosure of sensitive information in the IKE_AUTH negotiation process. The scenarios in which disclosure of potentially sensitive information can occur are complex, and depend on factors beyond the control of attackers.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Affected software

No affected versions have been published.

Timeline

Published: Mar 5, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-256177.5Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Sq CVE-2024-256187.4Mastodon is a free, open-source social network server based on ActivityPub. Mastodon allows new identities from configured authentication pr CVE-2024-256194.3Mastodon is a free, open-source social network server based on ActivityPub. When an OAuth Application is destroyed, the streaming server was CVE-2024-25629.8A vulnerability, which was classified as critical, was found in PandaXGO PandaX up to 20240310. This affects the function InsertRole of the CVE-2024-256206.4Helm is a tool for managing Charts. Charts are packages of pre-configured Kubernetes resources. When either the Helm client or SDK is used t CVE-2024-256217.8containerd is an open-source container runtime. Versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4 and 2.CVE-2024-256224.3h2o is an HTTP server with support for HTTP/1.x, HTTP/2 and HTTP/3. The configuration directives provided by the headers handler allows user CVE-2024-256237.7Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.2.7, 4.1.15, 4.0.15, and 3.5.19, when fetchi CVE-2024-256246.8Iris is a web collaborative platform aiming to help incident responders sharing technical details during investigations. Due to an improper CVE-2024-256259.3Pimcore's Admin Classic Bundle provides a Backend UI for Pimcore. A potential security vulnerability has been discovered in `pimcore/admin-u CVE-2024-256269.8Yocto Project is an open source collaboration project that helps developers create custom Linux-based systems regardless of the hardware arc CVE-2024-256274.8Alf.io is a free and open source event attendance management system. An administrator on the alf.io application is able to upload HTML files