Command injection

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...

CVE-2021-40991

Aruba ClearPass Policy Manager is affected by CVE-2021-40991, a remote information-disclosure vulnerability. Affected versions include ClearPass Policy Manager 6.10.x prior to 6.10.2, 6.9.x prior to 6.9.7-HF1, and 6.8.x prior to 6.8.9-HF1. The issue enables unauthorized disclosure of sensitive in...

Aruba Networks ClearPass Information Disclosure Vulnerability (CNVD-2020-33640)

Aruba Networks ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. An information disclosure vulnerability exists in Aruba Networks ClearPass versions 6.8.x prior to 6.8.4 and 6.7.x prior to 6.7.13. An...

Design/Logic Flaw

Unspecified vulnerability in the Agent user interface in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 allows local users to gain privileges via unknown attack vectors...

CVE-2008-2291

axengine.exe in Symantec Altiris Deployment Solution 6.8.x and 6.9.x before 6.9.176 generates credentials with a fixed salt or without any salt, which makes it easier for remote attackers to guess encrypted domain credentials...

Symantec Altiris Deployment服务器代理AClient.exe本地权限提升漏洞

BUGTRAQ ID: 28110 Symantec Altiris Deployment Solution是自动化的操作系统部署解决方案，用于从统一的位置部署和管理服务器、桌面和笔记本等。 Symantec Altiris Deployment服务器代理存在权限提升漏洞，本地攻击者可以通过shatter攻击获得非授权的特权访问。仅有登录到运行了Symantec Altiris Deployment Solution代理（AClient.exe） 的系统的攻击者才可以利用这个漏洞。 Symantec Altiris Deployment Solution 6.8.x Symantec...