Lucene search

K
cveMitreCVE-2014-6624
HistoryNov 19, 2014 - 6:59 p.m.

CVE-2014-6624

2014-11-1918:59:03
CWE-200
mitre
web.nvd.nist.gov
27
cve-2014-6624
insight module
aruba networks clearpass
remote authenticated users
arbitrary files
nvd

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

52.7%

The Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to read arbitrary files via unspecified vectors.

Affected configurations

Nvd
Node
arubanetworksclearpassRange6.3.4
OR
arubanetworksclearpassMatch6.4.0
VendorProductVersionCPE
arubanetworksclearpass*cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*
arubanetworksclearpass6.4.0cpe:2.3:a:arubanetworks:clearpass:6.4.0:*:*:*:*:*:*:*

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:S/C:C/I:N/A:N

AI Score

6.4

Confidence

Low

EPSS

0.002

Percentile

52.7%

Related for CVE-2014-6624