CVE-2020-7113

2020-04-1616:14:37

hpe

www.cve.org

AI Score

6.1

Confidence

High

EPSS

0.001

Percentile

28.4%

JSON

A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP packets resulting in the compromise of some of ClearPass’ service accounts. Resolution: Fixed in 6.7.10, 6.8.1, 6.9.0 and higher.

CNA Affected

[
  {
    "product": "ClearPass Policy Manager",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "ClearPass 6.8.x prior to 6.8.5 ClearPass 6.7.x prior to 6.7.13"
      }
    ]
  }
]

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-004.txt