{"id":"044c5c65-a22e-46b1-9b5b-468bd951526b","engagementId":"ad93ed26-eabf-4a56-bb0c-82385532b4c2","data":{"brief":{"id":"5a0a50ec-8f94-4e14-82ec-af9989d6d701","name":"HPE Networking Product Public Program","tagline":"Support, simplify, and secure every connection.","description":"\u003cp\u003eHPE Networking is dedicated to security research, and we look forward to working with the working with you to help secure our products. We will pay bounties for valid, impactful vulnerabilities in our networking product lines. \u003c/p\u003e\n\n\u003cp\u003eFor the initial prioritization/rating of findings, this program will use the Bugcrowd Vulnerability Rating Taxonomy. However, it is important to note that in some cases a vulnerability priority will be modified due to its likelihood, impact, or underlying risk to HPE Networking. In any instance where an issue is downgraded, a full, detailed explanation will be provided to the researcher - along with the opportunity to appeal and make a case for a higher priority.\u003c/p\u003e\n\n\u003cp\u003eIf you do not have access to the Networking Support Portal, please refer to our publicly available software images at \u003ca href=\"https://ln5.sync.com/dl/7af99bb50#5cw6qt88-5z97mbwv-hvunmbw4-paykvidg\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://ln5.sync.com/dl/7af99bb50#5cw6qt88-5z97mbwv-hvunmbw4-paykvidg\u003c/a\u003e\u003c/p\u003e\n\n\u003cp\u003eFor vulnerability submissions against our infrastructure (*.hpe.com and other domains), please use the HPE Hackerone program at \u003ca href=\"https://hackerone.com/hpe_vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://hackerone.com/hpe_vdp\u003c/a\u003e. \u003c/p\u003e","industryTagId":"46b8dcc8-bbd9-4a60-80ab-ab088c2bc3e4","targetsOverview":"\u003cp\u003e\u003cem\u003eAny HPE Aruba Networking products, assets, or hosts not listed as \"in-scope\", are thereby out-of-scope.\u003c/em\u003e\u003cbr\u003e\nIncreased bounties will be paid on findings against AOS-10, AOS-CX, and the \u003cem\u003enew\u003c/em\u003e HPE Aruba Networking Central. Software images on applicable products where available can be found in respective categories below.\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eTarget Information:\u003c/h2\u003e\n\n\u003chr\u003e\n\n\u003ch4\u003eFor vulnerabilities discovered in one software branch and later found replicated in another branch of the same product, we reserve the right to treat them as duplicate findings. As such, only the original submission will be eligible for a bounty, and no additional reward will be granted for the duplicate.\u003c/h4\u003e\n\n\u003chr\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking Wireless – AOS-10.7 and later\u003c/strong\u003e\u003cbr\u003e\n\u003cstrong\u003e\u003cem\u003eIncreased Rewards\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThe AOS-10 Virtual Gateway can be run as a virtual machine by downloading the 10.7.x OVA at \u003ca href=\"https://ln5.sync.com/dl/5ad62de10#bvefcjzk-uawzt3im-682mvu62-axihc3qj\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://ln5.sync.com/dl/5ad62de10#bvefcjzk-uawzt3im-682mvu62-axihc3qj\u003c/a\u003e. There is other 10.x firmware available for examination as well. Pair it with your HPE Aruba Networking Central account by following the documentation at \u003ca href=\"https://arubanetworking.hpe.com/techdocs/central/2.5.8/content/aos10x/cfg/aps/aos10-conf_ap.htm\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://arubanetworking.hpe.com/techdocs/central/2.5.8/content/aos10x/cfg/aps/aos10-conf_ap.htm\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003ch3\u003eNote - we require the switch to be connected to HPE Aruba Networking Central. Reports that use VGWs that have been \"jailbroken\" will need to use a physical controller (you can get an old one on eBay for cheap) or use an AOS-8 VMC.\u003c/h3\u003e\n\n\u003cul\u003e\n\u003cli\u003eProduct Documentation is available at \u003ca href=\"https://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=Access%20Points,Mobility%20Gateways\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=Access%20Points,Mobility%20Gateways\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003eAOS-10 Gateways and Access Points require physical hardware to test, which we can unfortunately not provide, but you should feel free to reverse engineer firmware images in order to submit findings. Non-exploitable vulnerabilities discovered through static analysis alone will be rejected.\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eWe will pay increased bounties for findings on 10.7.x and later versions.\u003c/li\u003e\n\u003cli\u003eWe will also accept findings on 10.4.x, but with our standard bounties.\u003c/li\u003e\n\u003cli\u003eOther versions may not be accepted at our discretion due to end-of-life issues.\u003c/li\u003e\n\u003cli\u003eIf you have any questions, please open a request with hpe-networking-bugcrowd@hpe.com and we will do our best to assist you. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking Wireless – AOS-8 and Aruba Instant\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThe AOS-8 Virtual Gateway can be run as a virtual machine by downloading the AOS-8 OVAs found at \u003ca href=\"https://ln5.sync.com/dl/5ad62de10#bvefcjzk-uawzt3im-682mvu62-axihc3qj\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://ln5.sync.com/dl/5ad62de10#bvefcjzk-uawzt3im-682mvu62-axihc3qj\u003c/a\u003e \u003c/li\u003e\n\u003cli\u003eAOS-8 Gateways and Access Points require physical hardware to test, which we can unfortunately not provide, but you should feel free to reverse engineer firmware images in order to submit findings. Non-exploitable vulnerabilities discovered through static analysis alone will be rejected.\u003c/li\u003e\n\u003cli\u003eThe latest LSR is 8.13.x.x and we would prefer it if your submission was on that version.\u003c/li\u003e\n\u003cli\u003eDocumentation is available at: \u003ca href=\"https://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=Access%20Points,Mobility%20Gateways\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=Access%20Points,Mobility%20Gateways\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eWe will accept vulnerabilities from AOS-8 versions published at the firmware link shared above with our standard bounties.\u003c/li\u003e\n\u003cli\u003eOther versions may not be accepted at our discretion due to end-of-life issues.\u003c/li\u003e\n\u003cli\u003eIf you have any questions, please open a request with hpe-networking-bugcrowd@hpe.com and we will do our best to assist you. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking CX Wired Switch Series and AOS-CX\u003c/strong\u003e\u003cbr\u003e\n\u003cstrong\u003e\u003cem\u003eIncreased Rewards\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAn AOS-CX Switch simulator can be run as a virtual machine by downloading the OVA at \u003ca href=\"https://ln5.sync.com/dl/983c21430#hz7kuqsh-abef6rii-259d49v5-5f343sdd\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://ln5.sync.com/dl/983c21430#hz7kuqsh-abef6rii-259d49v5-5f343sdd\u003c/a\u003e \n\u003cstrong\u003eNote:\u003c/strong\u003e Any vulnerabilities requiring the use of the \u003ccode\u003estart-shell\u003c/code\u003e command will not be accepted. \u003c/li\u003e\n\u003cli\u003eThe AOS-CX Wired Switches require the physical hardware to test in most instances, but you should feel free to reverse engineer firmware images in order to submit findings. As noted above an OVA is also provided and findings against this OVA will also be accepted as we realize most researchers will not have access to physical hardware. Non-exploitable vulnerabilities discovered through static analysis alone will be rejected without some proof of concept. \u003c/li\u003e\n\u003cli\u003eDocumentation is available at: \u003ca href=\"https://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=Switches\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=Switches\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eWe will accept vulnerabilities from AOS-CX versions published at the firmware link shared above\u003c/li\u003e\n\u003cli\u003eOther versions may not be accepted at our discretion due to end-of-life issues\u003c/li\u003e\n\u003cli\u003eIf you have any questions, please open a request with hpe-networking-bugcrowd@hpe.com and we will do our best to assist you. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking Central and related support sites\u003c/strong\u003e\u003cbr\u003e\n\u003cstrong\u003e\u003cem\u003eIncreased Rewards\u003c/em\u003e\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eWe are most interested in vulnerabilities on our \u003cem\u003enew\u003c/em\u003e Central. We will accept P1-P4 vulnerabilities on \u003cem\u003enew\u003c/em\u003e Central.\u003cbr\u003e\n\u003cstrong\u003eHow to enable new central:\u003c/strong\u003e\u003cbr\u003e\n\u003c/li\u003e\n\u003cli\u003eAfter logging into Central, select the \"New Central\" slider in the top right.\u003cbr\u003e\n\u003cimg src=\"https://bugcrowd.com/engagements/aruba-product-public/attachments/d9792f6e-7ff2-4775-8b13-339f5029c142\" title=\"image-2025-04-14T20:11:55.417Z.png\" alt=\"image-2025-04-14T20:11:55.417Z.png\"\u003e\u003cbr\u003e\n\u003cimg src=\"https://bugcrowd.com/engagements/aruba-product-public/attachments/42f99798-367e-42f0-94d6-683e1641b84a\" title=\"image-2025-04-14T20:11:59.761Z.png\" alt=\"image-2025-04-14T20:11:59.761Z.png\"\u003e\u003cbr\u003e\n\u003c/li\u003e\n\u003cli\u003ePlease note that we are only interested in P1 and P2 severity vulnerabilities on “old” Central.\u003c/li\u003e\n\u003cli\u003eSubmissions should be focused on HPE Aruba Networking Central. As a cloud service there are many sites that may look associated with Central, but which are part of the greater HPE Greenlake Cloud Platform. Submissions against these hosts may not be accepted based upon our discretion. Questions about the applicability of a particular submission can be directed to hpe-networking-bugcrowd@hpe.com. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking ClearPass Policy Manager and related client software\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eVersions should be 6.12.x or 6.11.x if possible. Other versions may not be accepted at our discretion due to end-of-life issues.\u003c/li\u003e\n\u003cli\u003eDocumentation is available at: \u003ca href=\"https://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=ClearPass%20Policy%20Manager\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=ClearPass%20Policy%20Manager\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eRelated client applications include HPE Aruba Networking VIA, Onguard, and Onboard and are eligible for bounty. \u003c/li\u003e\n\u003cli\u003eIf you have any questions, please open a request with hpe-networking-bugcrowd@hpe.com and we will do our best to assist you.\u003cbr\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking Private 5G\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThe HPE Aruba Networking Private 5G products require the physical hardware to test, but you should feel free to reverse engineer firmware images in order to submit findings. \u003c/li\u003e\n\u003cli\u003eDocumentation is available at:\n\n\u003cul\u003e\n\u003cli\u003e\u003ca href=\"https://support.hpe.com/connect/s/product?kmpmoid=1014769364\u0026amp;language=en_US\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://support.hpe.com/connect/s/product?kmpmoid=1014769364\u0026amp;language=en_US\u003c/a\u003e\u003c/li\u003e\n\u003cli\u003e\u003ca href=\"https://support.hpe.com/connect/s/product?kmpmoid=1014769362\u0026amp;language=en_US\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://support.hpe.com/connect/s/product?kmpmoid=1014769362\u0026amp;language=en_US\u003c/a\u003e\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking SSE\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eDocumentation is available at: \u003ca href=\"https://support.hpe.com/connect/s/product?language=en_US\u0026amp;kmpmoid=1014795496\u0026amp;tab=manuals\u0026amp;cep=on\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://support.hpe.com/connect/s/product?language=en_US\u0026amp;kmpmoid=1014795496\u0026amp;tab=manuals\u0026amp;cep=on\u003c/a\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Networking Aruba Instant On\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThe HPE Networking Aruba Instant On Access Points require the physical hardware to test, but you should feel free to reverse engineer firmware images in order to submit findings. \u003c/li\u003e\n\u003cli\u003eHPE Networking Aruba Instant On Switches are not eligible for bounty.\u003c/li\u003e\n\u003cli\u003eDocumentation is available at: \u003ca href=\"https://community.instant-on.hpe.com/support/instant-on-resources\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://community.instant-on.hpe.com/support/instant-on-resources\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eIf you have any questions, please open a request with hpe-networking-bugcrowd@hpe.com and we will do our best to assist you. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking Management Software (AirWave)\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eDocumentation is available at: \u003ca href=\"https://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=AirWave\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=AirWave\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eVersions should be 8.3.0.4 if possible. Other versions may not be accepted at our discretion due to end-of-life issues. \u003c/li\u003e\n\u003cli\u003eNo bounties are awarded for vulnerabilities on HPE Aruba Networking Management Software (AirWave), but you may still receive points and a CVE.\u003c/li\u003e\n\u003cli\u003eIf you have any questions, please open a request with hpe-networking-bugcrowd@hpe.com and we will do our best to assist you. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking User Experience Insight (UXI) Sensors\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThe User Experience Insight Sensors require the physical hardware to test, but you should feel free to reverse engineer firmware images in order to submit findings. \u003c/li\u003e\n\u003cli\u003eWe will also accept submissions against the user portal for UXI sensors located at https://dashboard.capenetworks.com/login \u003c/li\u003e\n\u003cli\u003eDocumentation is available at: \u003ca href=\"https://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=User%20Experience%20Insight%20(UXI)\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=User%20Experience%20Insight%20(UXI)\u003c/a\u003e.\u003c/li\u003e\n\u003cli\u003eIf you have any questions, please open a request with hpe-networking-bugcrowd@hpe.com and we will do our best to assist you.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking EdgeConnect Enterprise and EdgeConnect Enterprise Orchestrator\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eThese are former Silver Peak products that are now part of HPE Aruba Networking's product offerings.\u003c/li\u003e\n\u003cli\u003eDocumentation can be reviewed at \u003ca href=\"https://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=EdgeConnect%20SD-WAN,EdgeConnect%20WAN%20Optimization\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://networkingsupport.hpe.com/globalsearch#tab=Documents\u0026amp;f-sfproductqueue=EdgeConnect%20SD-WAN,EdgeConnect%20WAN%20Optimization\u003c/a\u003e\n\u003c/li\u003e\n\u003cli\u003eIf you have any questions, please open a request with hpe-networking-bugcrowd@hpe.com and we will do our best to assist you. \u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking Fabric Composer\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eFeel free to submit vulnerabilities on the latest version. \n\n\u003cul\u003e\n\u003cli\u003eDocumentation is available at: \u003ca href=\"https://networkingsupport.hpe.com/globalsearch#q=Fabric%20Composer\u0026amp;tab=Documents\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://networkingsupport.hpe.com/globalsearch#q=Fabric%20Composer\u0026amp;tab=Documents\u003c/a\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eHPE Aruba Networking NetEdit\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eFeel free to submit vulnerabilities on the latest version. \n\n\u003cul\u003e\n\u003cli\u003eDocumentation is available at: \u003ca href=\"https://networkingsupport.hpe.com/globalsearch#q=netedit\u0026amp;tab=Documents\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://networkingsupport.hpe.com/globalsearch#q=netedit\u0026amp;tab=Documents\u003c/a\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cstrong\u003eAdditional Support Link:\u003c/strong\u003e \u003ca href=\"https://networkingsupport.hpe.com/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://networkingsupport.hpe.com/\u003c/a\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eFocus Areas:\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eAs stated above, discoveries on AOS-10, AOS-CX, and the “new” Aruba Central will see increased reward amounts for a limited time.\u003c/li\u003e\n\u003cli\u003eAttack scenarios where you can bypass input validation to achieve code execution. \u003c/li\u003e\n\u003cli\u003eAttack scenarios where you can bypass authentication to access underlying system functions\u003c/li\u003e\n\u003cli\u003eAttack scenarios where you can access other user’s sensitive information\u003c/li\u003e\n\u003cli\u003eIt is recommended tests are performed in the latest version of software/ firmware available. Older versions of software that are not End of Life/ Support are also in scope. For more information about what versions are End-of-Life visit \u003ca href=\"https://networkingsupport.hpe.com/notifications;notificationSortBy=announcementDate;notificationCategory=Product%20End%20of%20Life;notificationSearchText=;\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://networkingsupport.hpe.com/notifications;notificationSortBy=announcementDate;notificationCategory=Product%20End%20of%20Life;notificationSearchText=;\u003c/a\u003e.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eOut-of-Scope\u003c/h2\u003e\n\n\u003cul\u003e\n\u003cli\u003eHPE corporate websites and resources. \u003c/li\u003e\n\u003cli\u003eOther HPE or HPE Aruba Networking products not specifically listed in one of the in-scope target groups.\u003c/li\u003e\n\u003cli\u003eRate limiting or other DoS type attacks for any HPE Aruba Networking hosts\u003c/li\u003e\n\u003cli\u003eOpen redirects\u003c/li\u003e\n\u003cli\u003elink injection will be considered but impact might be reduced depending on site\u003c/li\u003e\n\u003cli\u003eAny DMARC findings or similar without demonstrated proof of impact. A lot of arubanetworks.com subdomains actually do not accept email modern day, although historically they did. \u003c/li\u003e\n\u003cli\u003eInfrastructure with certificates like instant.arubanetworks.com or hostnames like securelogin.arubanetworks.com/securelogin.hpe.com. These are products owned by customers which are not setup and they are not owned by HPE Aruba Networking nor are they externally facing infrastructure.\u003c/li\u003e\n\u003cli\u003eAny *.arubanetworks.com host not specifically listed as in scope above\u003c/li\u003e\n\u003cli\u003eReflected XSS on *.cloudguest.central.arubanetworks.com. Other vulnerabilities on those hosts are still accepted.\u003c/li\u003e\n\u003cli\u003eAuthenticated DoS requiring admin permissions\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eSafe Harbor:\u003c/h2\u003e\n\n\u003cp\u003e\u003cstrong\u003eWhen conducting vulnerability research according to this policy, we consider this research to be:\u003c/strong\u003e\u003c/p\u003e\n\n\u003cul\u003e\n\u003cli\u003eAuthorized in accordance with the Computer Fraud and Abuse Act (CFAA) (and/or similar state laws), and we will not initiate or support legal action against you for accidental, good faith violations of this policy;\u003c/li\u003e\n\u003cli\u003eExempt from the Digital Millennium Copyright Act (DMCA), and we will not bring a claim against you for circumvention of technology controls;\u003c/li\u003e\n\u003cli\u003eExempt from restrictions in our Terms \u0026amp; Conditions that would interfere with conducting security research, and we waive those restrictions on a limited basis for work done under this policy; and\u003c/li\u003e\n\u003cli\u003eLawful, helpful to the overall security of the Internet, and conducted in good faith.\u003c/li\u003e\n\u003cli\u003eYou are expected, as always, to comply with all applicable laws.\u003c/li\u003e\n\u003c/ul\u003e\n\n\u003cp\u003e\u003cem\u003eIf at any time you have concerns or are uncertain whether your security research is consistent with this policy, please inquire via our \u003ca href=\"https://bugcrowd-support.freshdesk.com/\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003eFreshdesk Portal\u003c/a\u003e before going any further.\u003c/em\u003e\u003c/p\u003e\n\n\u003chr\u003e\n\n\u003ch2\u003eDisclosure:\u003c/h2\u003e\n\n\u003cp\u003eAt the current time, HPE Aruba Networking has chosen to not participate in the Bugcrowd's coordinated disclosure program. However, we do support disclosure from our programs based upon the following guideline:\u003cbr\u003e\nHPE Aruba Networking handles and discloses vulnerabilities in accordance with ISO/IEC 30111.\u003cbr\u003e\nPublic disclosure of vulnerabilities will generally take place only after permanent fixes are available. Where the vulnerability occurs in multiple branches of software, or in multiple software products, HPE Aruba Networking will publish advisories once the last branch or product is updated and released. However, if HPE Aruba Networking learns that information about an unpublished vulnerability is being communicated externally, a vulnerability advisory will be published immediately along with details of any possible workaround or defense. In the case of vulnerabilities in open-source software that are being publicly discussed, HPE Aruba Networking will immediately issue a security advisory once it has been determined that the vulnerability affects an HPE Aruba Networking product.\u003c/p\u003e\n\n\u003cp\u003eThe initial vulnerability advisory will consist of general information about the vulnerability, workarounds, and steps to resolve the vulnerability. The public advisory is the only information that HPE Aruba Networking will provide to anyone for the first 60 days. After 60 days HPE Aruba Networking may, at its sole discretion, make public full details about the vulnerability. Security researchers who wish to publicize HPE Aruba Networking vulnerability details (e.g. in a blog or at a conference) are asked to wait for the same 60-day period after an advisory has been published. As a courtesy, we request you inform HPE Aruba Networking that such presentation will be given.\u003c/p\u003e\n\n\u003cp\u003eDisclosure is not selective under any circumstances. It is HPE Aruba Networking’s policy to notify all customers of vulnerabilities at the same time. No HPE Aruba Networking customer, partner, or third-party is given advance notification or additional details of a vulnerability. HPE Aruba Networking’s OEM partners are generally notified three days in advance of public disclosure to allow their respective security response teams to prepare for notification of their own customers. HPE Aruba Networking’s OEM partners have agreed contractually to coordinate vulnerability notifications with HPE Aruba Networking so that all end users are alerted at the same time. HPE Aruba Networking’s customer-facing employees (TAC, SE, etc.) are provided a copy of the advisory approximately 18 hours before public disclosure, but are prohibited from sharing that information until it is officially released. OEM partners and customer-facing employees are only given a copy of the public advisory; they are not provided with full details of a vulnerability.\u003c/p\u003e","safeHarborStatus":{"status":"full","label":"Safe harbor","description":"This engagement is fully committed to providing safe harbor for good-faith security research."},"collaborationEnabled":true,"additionalInformation":""},"scope":[{"id":"835e7e62-3037-4350-94ba-35155fc36a1c","name":"HPE Aruba Networking Target Group 1","targets":[{"id":"45b99bf2-3b29-468b-92b1-0d454b3458c6","uri":"","name":"HPE Aruba Networking Wireless - AOS-10.7 and above Gateways (GW)","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"c7a84ba8-fd0f-4e12-9eda-0a8438226b63","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"45b99bf2-3b29-468b-92b1-0d454b3458c6"},{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"45b99bf2-3b29-468b-92b1-0d454b3458c6"}],"recentChangeFlags":null},{"id":"c9172a9b-67f0-48c8-a682-64aaa823a743","uri":"","name":"HPE Aruba Networking Wireless - AOS-10.7 and above Access Points (AP)","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"dc2db69b-1b85-40a1-bbca-bda98c82e6c6","sortOrder":1},"sortOrder":1,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"c9172a9b-67f0-48c8-a682-64aaa823a743"},{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"c9172a9b-67f0-48c8-a682-64aaa823a743"}],"recentChangeFlags":null},{"id":"2e734169-b7d1-4340-8e20-c386635d1778","uri":"","name":"HPE Aruba Networking Central - New UI (see Scope Details)","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f81a9e4e-2998-4aa5-ad40-9ac230f2e68e","sortOrder":2},"sortOrder":2,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"2e734169-b7d1-4340-8e20-c386635d1778"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"2e734169-b7d1-4340-8e20-c386635d1778"}],"recentChangeFlags":null},{"id":"e4d34df3-a0bd-4a64-a920-0a28e623de2d","uri":"","name":"ArubaOS-CX Switches","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"8817d2ac-cdd8-4432-953b-d6b88f369860","sortOrder":3},"sortOrder":3,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"e4d34df3-a0bd-4a64-a920-0a28e623de2d"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"e4d34df3-a0bd-4a64-a920-0a28e623de2d"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"e4d34df3-a0bd-4a64-a920-0a28e623de2d"},{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"e4d34df3-a0bd-4a64-a920-0a28e623de2d"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":0,"description":null,"rewardRange":{"id":"a2e8386c-d00d-45e5-bea3-d545f38c379d","p1MaxCents":500000,"p1MinCents":500000,"p2MaxCents":300000,"p2MinCents":300000,"p3MaxCents":120000,"p3MinCents":120000,"p4MaxCents":60000,"p4MinCents":60000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cul\u003e\n\u003cli\u003eHPE Aruba Networking Target Group 1 are higher priority and will be paying additional bounties compared to Group 2. See Scope Details for relevant VMs. \u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{"1":{"min":5000,"max":5000},"2":{"min":3000,"max":3000},"3":{"min":1200,"max":1200},"4":{"min":600,"max":600},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"75dde33b-43b3-4612-bb3c-a2cc01bd8774","name":"HPE Aruba Networking Target Group 2 ","targets":[{"id":"0d134a28-fb97-478c-8330-d49d31ca7d3a","uri":"","name":"HPE Aruba Networking Wireless - AOS-8 Controllers","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"b3cba18e-5768-4d8a-a141-2bed159361dc","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"0d134a28-fb97-478c-8330-d49d31ca7d3a"},{"id":"9b8c3b7f-9a97-484b-94a0-b0f775144784","name":"WiFi","targetId":"0d134a28-fb97-478c-8330-d49d31ca7d3a"},{"id":"cc05697c-58bf-4b7b-a2b5-2ba0ead3270b","name":"Binary Analysis","targetId":"0d134a28-fb97-478c-8330-d49d31ca7d3a"},{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"0d134a28-fb97-478c-8330-d49d31ca7d3a"}],"recentChangeFlags":null},{"id":"096dc6b5-7b86-43b3-8429-130a33ee2090","uri":"","name":"HPE Aruba Networking Wireless - AOS-8 Instant AP (IAP)","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"fb435f69-d78f-4cfe-a998-ac960f37418d","sortOrder":1},"sortOrder":1,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"096dc6b5-7b86-43b3-8429-130a33ee2090"},{"id":"9b8c3b7f-9a97-484b-94a0-b0f775144784","name":"WiFi","targetId":"096dc6b5-7b86-43b3-8429-130a33ee2090"},{"id":"cc05697c-58bf-4b7b-a2b5-2ba0ead3270b","name":"Binary Analysis","targetId":"096dc6b5-7b86-43b3-8429-130a33ee2090"},{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"096dc6b5-7b86-43b3-8429-130a33ee2090"}],"recentChangeFlags":null},{"id":"eac0e4aa-8001-4bd3-b6fa-956587987a06","uri":"","name":"HPE Aruba Networking Wireless - AOS-10.4 Gateways (GW)","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"a0d42b1a-0d70-49a6-9396-b7f61a4a8744","sortOrder":2},"sortOrder":2,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"eac0e4aa-8001-4bd3-b6fa-956587987a06"},{"id":"9b8c3b7f-9a97-484b-94a0-b0f775144784","name":"WiFi","targetId":"eac0e4aa-8001-4bd3-b6fa-956587987a06"},{"id":"cc05697c-58bf-4b7b-a2b5-2ba0ead3270b","name":"Binary Analysis","targetId":"eac0e4aa-8001-4bd3-b6fa-956587987a06"},{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"eac0e4aa-8001-4bd3-b6fa-956587987a06"}],"recentChangeFlags":null},{"id":"49c7130d-9067-45b8-a4c7-48c641ca2187","uri":"","name":"HPE Aruba Networking Wireless - AOS-10.4 Access Points (AP)","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ed152242-7330-411b-aad3-a6f0654132cf","sortOrder":3},"sortOrder":3,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"49c7130d-9067-45b8-a4c7-48c641ca2187"},{"id":"9b8c3b7f-9a97-484b-94a0-b0f775144784","name":"WiFi","targetId":"49c7130d-9067-45b8-a4c7-48c641ca2187"},{"id":"cc05697c-58bf-4b7b-a2b5-2ba0ead3270b","name":"Binary Analysis","targetId":"49c7130d-9067-45b8-a4c7-48c641ca2187"},{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"49c7130d-9067-45b8-a4c7-48c641ca2187"}],"recentChangeFlags":null},{"id":"54e2e344-6b51-469b-b521-85cb65895b33","uri":"","name":"HPE Aruba Networking ClearPass Policy Manager","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"38b3dc7c-f1ed-4d1c-901c-6a1d5c9762d7","sortOrder":4},"sortOrder":4,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"54e2e344-6b51-469b-b521-85cb65895b33"},{"id":"9b8c3b7f-9a97-484b-94a0-b0f775144784","name":"WiFi","targetId":"54e2e344-6b51-469b-b521-85cb65895b33"},{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"54e2e344-6b51-469b-b521-85cb65895b33"},{"id":"fc8162a2-8e37-4a27-8cbd-3b40e7799f4e","name":"Desktop Application Testing","targetId":"54e2e344-6b51-469b-b521-85cb65895b33"}],"recentChangeFlags":null},{"id":"53ee4602-340a-4458-b338-af6c72f5c182","uri":"","name":"HPE Aruba Networking EdgeConnect SD-WAN Orchestrator","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a50aa522-a47d-4c4b-8e11-8290cf70daa9","sortOrder":5},"sortOrder":5,"tags":[{"id":"041d5363-86a6-40b1-9a02-c20f6ab39c05","name":"Linux","targetId":"53ee4602-340a-4458-b338-af6c72f5c182"},{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"53ee4602-340a-4458-b338-af6c72f5c182"},{"id":"4cb84232-a78c-4fc6-b51e-cbe67d4ee5f1","name":"IoT","targetId":"53ee4602-340a-4458-b338-af6c72f5c182"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"53ee4602-340a-4458-b338-af6c72f5c182"},{"id":"cc05697c-58bf-4b7b-a2b5-2ba0ead3270b","name":"Binary Analysis","targetId":"53ee4602-340a-4458-b338-af6c72f5c182"}],"recentChangeFlags":null},{"id":"d9bf59b2-4af5-434d-847a-3162ecaf10a7","uri":"","name":"HPE Networking Instant On APs and supporting backend infrastructure","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"07480fb8-d551-4402-a219-df12e1f0f6ba","sortOrder":6},"sortOrder":6,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"d9bf59b2-4af5-434d-847a-3162ecaf10a7"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"d9bf59b2-4af5-434d-847a-3162ecaf10a7"},{"id":"9b8c3b7f-9a97-484b-94a0-b0f775144784","name":"WiFi","targetId":"d9bf59b2-4af5-434d-847a-3162ecaf10a7"},{"id":"cc05697c-58bf-4b7b-a2b5-2ba0ead3270b","name":"Binary Analysis","targetId":"d9bf59b2-4af5-434d-847a-3162ecaf10a7"}],"recentChangeFlags":null},{"id":"793e4771-c875-4793-afde-0a2d9f10ea3c","uri":"","name":"HPE Aruba Networking Fabric Composer","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"ad159376-95af-4bd1-aab9-6b2909846e82","sortOrder":7},"sortOrder":7,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"793e4771-c875-4793-afde-0a2d9f10ea3c"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"793e4771-c875-4793-afde-0a2d9f10ea3c"}],"recentChangeFlags":null},{"id":"dc1dd8d3-46cb-4213-ae88-573f7b664f4a","uri":"","name":"HPE Aruba Networking NetEdit","category":"network","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"bd8e0d39-99c0-4fc2-8814-51ffbcb148a1","sortOrder":8},"sortOrder":8,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"dc1dd8d3-46cb-4213-ae88-573f7b664f4a"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"dc1dd8d3-46cb-4213-ae88-573f7b664f4a"}],"recentChangeFlags":null},{"id":"935edd9e-e927-4415-bce2-18103a0a5377","uri":"","name":"HPE Aruba Networking Private 5G","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"300ec1c9-cbff-406a-b21f-0dfd0114be0d","sortOrder":9},"sortOrder":9,"tags":[{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"935edd9e-e927-4415-bce2-18103a0a5377"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"935edd9e-e927-4415-bce2-18103a0a5377"}],"recentChangeFlags":null},{"id":"7ad42e76-6603-45f3-bf52-a5db8d559ca3","uri":"","name":"HPE Aruba Networking SSE","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"f2d6e67d-75f3-449d-a0c3-dc04f2a25971","sortOrder":10},"sortOrder":10,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"7ad42e76-6603-45f3-bf52-a5db8d559ca3"},{"id":"fc8162a2-8e37-4a27-8cbd-3b40e7799f4e","name":"Desktop Application Testing","targetId":"7ad42e76-6603-45f3-bf52-a5db8d559ca3"}],"recentChangeFlags":null},{"id":"4ec359fa-16ae-48d8-be96-0dc8444aaa1d","uri":"","name":"HPE Aruba Networking VIA","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"0209b1ba-b48c-41d7-90fe-3a86acbf0d8e","sortOrder":11},"sortOrder":11,"tags":[{"id":"041d5363-86a6-40b1-9a02-c20f6ab39c05","name":"Linux","targetId":"4ec359fa-16ae-48d8-be96-0dc8444aaa1d"},{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"4ec359fa-16ae-48d8-be96-0dc8444aaa1d"},{"id":"9c63a0f4-0db6-40da-85f0-65d0aa72bfbe","name":"Windows","targetId":"4ec359fa-16ae-48d8-be96-0dc8444aaa1d"},{"id":"c5df6ad0-33b4-40ac-b6dd-8d4038997d40","name":"macOS","targetId":"4ec359fa-16ae-48d8-be96-0dc8444aaa1d"},{"id":"cc05697c-58bf-4b7b-a2b5-2ba0ead3270b","name":"Binary Analysis","targetId":"4ec359fa-16ae-48d8-be96-0dc8444aaa1d"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":1,"description":null,"rewardRange":{"id":"f06726a9-83f6-4676-8389-31045baa444b","p1MaxCents":250000,"p1MinCents":250000,"p2MaxCents":150000,"p2MinCents":150000,"p3MaxCents":60000,"p3MinCents":60000,"p4MaxCents":30000,"p4MinCents":30000,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cul\u003e\n\u003cli\u003eHPE Aruba Networking Target Group 2 will pay cash rewards for all valid submissions.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{"1":{"min":2500,"max":2500},"2":{"min":1500,"max":1500},"3":{"min":600,"max":600},"4":{"min":300,"max":300},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"b27f2545-ce69-4baa-a659-c787c109b8bc","name":"Aruba Central - Old/Original UI","targets":[{"id":"ab9cf99b-7171-4937-bc79-5ac5e088bdff","uri":"","name":"*.central.arubanetworks.com","category":"website","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"e8324d98-e62c-4951-8378-b2aa9c766387","sortOrder":0},"sortOrder":0,"tags":[{"id":"95db792c-091b-4c81-8d72-b09b1d065f09","name":"Cloud","targetId":"ab9cf99b-7171-4937-bc79-5ac5e088bdff"},{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"ab9cf99b-7171-4937-bc79-5ac5e088bdff"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":2,"description":null,"rewardRange":{"id":"28d93b31-a8a7-4ef0-8974-20bae6ec9f20","p1MaxCents":250000,"p1MinCents":250000,"p2MaxCents":150000,"p2MinCents":150000,"p3MaxCents":null,"p3MinCents":null,"p4MaxCents":null,"p4MinCents":null,"p5MaxCents":null,"p5MinCents":null,"engagementMaxCents":null},"descriptionHtml":"\u003cp\u003eFor the time being, we will only be accepting high and critical severity submissions for Aruba Central\u0026#39;s old UI. This is due to the old UI being deprecated and replaced by the end of 2025. \u003c/p\u003e","rewardRangeData":{"1":{"min":2500,"max":2500},"2":{"min":1500,"max":1500},"3":{"min":null,"max":null},"4":{"min":null,"max":null},"5":{"min":null,"max":null}},"recentChangeFlags":null},{"id":"3659d0d6-cfe5-4252-9841-ef888bf8415d","name":"HPE Aruba Networking Target Group 3","targets":[{"id":"8e030866-9ab1-4c4e-bb80-1c7a07a21a35","uri":"","name":"Aruba AirWave AMP","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"3b36a963-825a-44f0-af98-71bc546c7a0b","sortOrder":0},"sortOrder":0,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"8e030866-9ab1-4c4e-bb80-1c7a07a21a35"},{"id":"9ed6a00f-33b7-46f5-add4-2277bd2bea13","name":"Perl","targetId":"8e030866-9ab1-4c4e-bb80-1c7a07a21a35"},{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"8e030866-9ab1-4c4e-bb80-1c7a07a21a35"}],"recentChangeFlags":null},{"id":"56da45d8-3c5b-4b4e-9326-13c5df5d10f8","uri":"","name":"Aruba InstantOn Switches","category":"other","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"a5dee7bd-bbba-4ba5-a75a-c7f0cb902275","sortOrder":1},"sortOrder":1,"tags":[{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"56da45d8-3c5b-4b4e-9326-13c5df5d10f8"},{"id":"1f2fc0ed-8b79-47a2-a6dc-564a2d9d0828","name":"API Testing","targetId":"56da45d8-3c5b-4b4e-9326-13c5df5d10f8"},{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"56da45d8-3c5b-4b4e-9326-13c5df5d10f8"},{"id":"cc05697c-58bf-4b7b-a2b5-2ba0ead3270b","name":"Binary Analysis","targetId":"56da45d8-3c5b-4b4e-9326-13c5df5d10f8"}],"recentChangeFlags":null},{"id":"a1823a33-05b2-4fee-8ae4-cbf70e3c6cc8","uri":"","name":"Aruba User Experience Insight Sensors","category":"hardware","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"299f09d9-b15f-4f79-9607-d954369843c2","sortOrder":2},"sortOrder":2,"tags":[{"id":"041d5363-86a6-40b1-9a02-c20f6ab39c05","name":"Linux","targetId":"a1823a33-05b2-4fee-8ae4-cbf70e3c6cc8"},{"id":"057eb8bf-b949-4f16-95f2-5bd83851a78d","name":"Network Testing","targetId":"a1823a33-05b2-4fee-8ae4-cbf70e3c6cc8"},{"id":"45e28558-ada7-4f38-b087-fb0e6ac31e0d","name":"AWS","targetId":"a1823a33-05b2-4fee-8ae4-cbf70e3c6cc8"},{"id":"cc05697c-58bf-4b7b-a2b5-2ba0ead3270b","name":"Binary Analysis","targetId":"a1823a33-05b2-4fee-8ae4-cbf70e3c6cc8"},{"id":"ee6e7cc3-455d-4d97-b43e-5b8de420d096","name":"Hardware Testing","targetId":"a1823a33-05b2-4fee-8ae4-cbf70e3c6cc8"}],"recentChangeFlags":null}],"inScope":true,"sortOrder":3,"description":null,"rewardRange":null,"descriptionHtml":"\u003cp\u003eMonetary rewards are currently unavailable. We still welcome valid submissions, and eligible findings may receive CVEs with full credit to the reporter.\u003c/p\u003e","rewardRangeData":{},"recentChangeFlags":null},{"id":"92b6c021-e580-4294-acca-5def4fcf962e","name":"HPE Aruba Networking Out of scope","targets":[{"id":"4998a739-e69a-4432-aa2b-c06ff2bab73d","uri":"","name":"*.arubanetworks.com not in scope above - see in scope","category":"website","ipAddress":null,"description":null,"engagementBriefTargetGroupTarget":{"id":"05e37c33-e59e-4816-8690-8b870a84102e","sortOrder":0},"sortOrder":0,"tags":[{"id":"bc744424-2ab8-48c8-b938-c6d6abcdf500","name":"Website Testing","targetId":"4998a739-e69a-4432-aa2b-c06ff2bab73d"}],"recentChangeFlags":null},{"id":"786865f9-d64e-4b96-885f-f28d11259535","uri":"","name":"*.hpe.com","category":"other","ipAddress":"","description":null,"engagementBriefTargetGroupTarget":{"id":"9872eb14-0a72-45f2-a927-e62ce5e8940a","sortOrder":1},"sortOrder":1,"tags":null,"recentChangeFlags":null}],"inScope":false,"sortOrder":4,"description":null,"rewardRange":null,"descriptionHtml":"\u003cul\u003e\n\u003cli\u003eSubmissions related to *.arubanetworks.com that are not in scope above (i.e. *.central.arubanetworks.com is in scope, but www.arubanetworks.com is out of scope).\n\n\u003cul\u003e\n\u003cli\u003ePlease use the HPE Hackerone program at \u003ca href=\"https://hackerone.com/hpe_vdp\" rel=\"nofollow noreferrer\" target=\"_blank\"\u003ehttps://hackerone.com/hpe_vdp\u003c/a\u003e. \u003c/li\u003e\n\u003c/ul\u003e\u003c/li\u003e\n\u003cli\u003ehttps://action.arubainstanton.com is out of scope.\u003c/li\u003e\n\u003cli\u003eReflected XSS on *.cloudguest.central.arubanetworks.com. Other vulnerabilities on those hosts are still accepted.\u003c/li\u003e\n\u003cli\u003eInfrastructure with certificates like instant.arubanetworks.com or hostnames like securelogin.arubanetworks.com/securelogin.hpe.com. These are products owned by customers which are not setup and they are not owned by HPE Aruba Networking nor are they externally facing infrastructure.\u003c/li\u003e\n\u003c/ul\u003e","rewardRangeData":{},"recentChangeFlags":null}],"resources":[{"id":"d9792f6e-7ff2-4775-8b13-339f5029c142","attachmentPath":"https://bugcrowd.com/engagements/hpe-networking-product-public/attachments/d9792f6e-7ff2-4775-8b13-339f5029c142","name":"image-2025-04-14T20:11:55.417Z.png","filename":"image-2025-04-14T20:11:55.417Z.png","description":null,"icon":"fileImage","size":147092,"sizeLabel":"144 KB","uploadedAt":"14 Apr 2025","fileType":"Image","embedUrl":"https://bugcrowd.com/engagements/hpe-networking-product-public/attachments/d9792f6e-7ff2-4775-8b13-339f5029c142"},{"id":"42f99798-367e-42f0-94d6-683e1641b84a","attachmentPath":"https://bugcrowd.com/engagements/hpe-networking-product-public/attachments/42f99798-367e-42f0-94d6-683e1641b84a","name":"image-2025-04-14T20:11:59.761Z.png","filename":"image-2025-04-14T20:11:59.761Z.png","description":null,"icon":"fileImage","size":60070,"sizeLabel":"58.7 KB","uploadedAt":"14 Apr 2025","fileType":"Image","embedUrl":"https://bugcrowd.com/engagements/hpe-networking-product-public/attachments/42f99798-367e-42f0-94d6-683e1641b84a"}],"engagement":{"id":"ad93ed26-eabf-4a56-bb0c-82385532b4c2","code":"hpe-networking-product-public","state":"in_progress","endsAt":null,"bountyId":"f672a381-f44e-472c-b28f-a4cb26a11266","startsAt":"2023-01-17T18:00:00Z"},"vrtScopeRules":[],"engagementConfiguration":{"participation":"open","crowdSelectionStrategy":"none"}},"industryName":"Technology","methodologyName":null,"logoUrl":"https://logos.bugcrowdusercontent.com/logos/7e8c/d8c6/25e58f47/5907e6f9474d21724106fe6253d92e08_screen_cap_300x300_canvas_use_this.jpg","logoBackgroundColor":"#ffffff","displayDisclosureTerms":true,"coordinatedDisclosure":true,"collaborationEnabled":true,"participation":"open","rewardAllocation":"pay_for_success","engagementTypeDetail":{"iconVariant":"bug-bounty","productLabel":"Bug Bounty","timeboxed":false},"pausedReason":null,"lastTransitionAt":"2023-01-17T18:00:00.000Z","cancellationReason":null,"statusLabel":"In progress","routesPaths":{"brief":"/engagements/hpe-networking-product-public","changelogs":"/engagements/hpe-networking-product-public/changelog","submissions":null,"announcements":"/engagements/hpe-networking-product-public/announcements","hallOfFame":"/engagements/hpe-networking-product-public/hall_of_fames","crowdstream":"/engagements/hpe-networking-product-public/crowdstream"},"announcementsCount":12,"knownIssuesEnabled":true,"isDemo":false,"serviceLevel":"Platform","submitReportUrl":"/engagements/hpe-networking-product-public/submissions/new","methodologyUrl":null,"progressPercentage":0,"badgeVariant":null,"userBannedFromEngagement":null,"isLoggedIn":false,"loginUrl":"/user/sign_in","scopedSubmissionsUrl":"/submissions?engagement%5B%5D=hpe-networking-product-public\u0026sort%5B%5D=submitted-desc","isFollowing":null,"credentialsUrl":null,"toggleSubscriptionUrl":"/hpe-networking-product-public/engagement_subscribers","engagementChangelogsUrl":"/engagements/hpe-networking-product-public/changelog","publishedAt":"2026-06-26T19:53:11.113Z","engagementChangelogUrl":"/engagements/hpe-networking-product-public/changelog/044c5c65-a22e-46b1-9b5b-468bd951526b","createUserFeedbacksUrl":"/engagements/hpe-networking-product-public/feedbacks","engagementCrowdstreamUrl":"/engagements/hpe-networking-product-public/crowdstream","acceptedSubmissionsEnabled":false,"disclosedReportsEnabled":true,"engagementsUrl":"/engagements","engagementPaymentDetailUrl":null,"shouldShowHideButton":false,"engagementHiddenData":{},"totalRewardPool":null,"vrtScopeRules":{"data":[]},"vrtVersion":"1.19.1","isSubmissionPublishThrottled":false,"showIdVerificationAlert":false,"identityVerificationSettingsUrl":"https://bugcrowd.com/h/settings/identity_verification","identityUrl":null}