CVE-2016-2031

Multiple vulnerabilities exists in Aruba Instate before 4.1.3.0 and 4.2.3.1 due to insufficient validation of user-supplied input and insufficient checking of parameters, which could allow a malicious user to bypass security restrictions, obtain sensitive information, perform unauthorized actions and execute arbitrary code.

• CWE-20

• http://packetstormsecurity.com/files/136997/Aruba-Authentication-Bypass-Insecure-Transport-Tons-Of-Issues.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/May/19Exploit, Mailing List, Third Party Advisory
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-004.txtVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-431802.pdfThird Party Advisory
• https://www.securityfocus.com/bid/90207Broken Link
• http://packetstormsecurity.com/files/136997/Aruba-Authentication-Bypass-Insecure-Transport-Tons-Of-Issues.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2016/May/19Exploit, Mailing List, Third Party Advisory
• http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-004.txtVendor Advisory
• https://cert-portal.siemens.com/productcert/pdf/ssa-431802.pdfThird Party Advisory
• https://www.securityfocus.com/bid/90207Broken Link

Published

Jan 31, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-2025HPE Service Manager 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40…
• CVE-2016-2026HPE Matrix Operating Environment before 7.5.1 allows remote …
• CVE-2016-2027HPE Matrix Operating Environment before 7.5.1 allows remote …
• CVE-2016-2028HPE Matrix Operating Environment before 7.5.1 allows remote …
• CVE-2016-2029HPE Matrix Operating Environment before 7.5.1 allows remote …
• CVE-2016-2030HPE Systems Insight Manager (SIM) before 7.5.1 allows remote…
• CVE-2016-2032A vulnerability exists in the Aruba AirWave Management Platf…7.5
• CVE-2016-2033Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2034SQL injection vulnerability in ClearPass Policy Manager 6.5.…
• CVE-2016-2035Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
• CVE-2016-2036The getURL function in drivers/secfilter/urlparser.c in secf…
• CVE-2016-2037The cpio_safer_name_suffix function in util.c in cpio 2.11 a…