important · Wi-Fi
Hard-coded accounts expose HPE ALE management and underlying operating-system logins.
Affects
HPE Networking Analytics and Location Engine, an appliance that analyzes clients and location data from Aruba wireless infrastructure.
A network client can present product-wide credentials to reachable ALE CLI, web-management or system-login interfaces without possessing a deployment-specific secret. HPE has published a fixed release.
Detail and 3 sources
We do not know which account yields complete appliance control because the advisory does not map the accounts to their shells, permissions or privilege levels.