CVE-2014-4013

The CVE-2014-4013 entry describes a SQL injection vulnerability in the Policy Manager of Aruba Networks ClearPass. Affected products/versions include ClearPass 5.x, 6.0.x, 6.1.x up to 6.1.4.61696, 6.2.x up to 6.2.6.62196, and 6.3.x before 6.3.4. The issue allows remote authenticated users to exec...

CVE-2014-4013

SQL injection vulnerability in the Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

PT-2014-5675

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions 5.x through 6.3.x before 6.3.4 Description The issue allows remote authenticated users to execute arbitrary SQL commands. Recommendations For versions 5.x through 6.1.4.61696, update to version 6.1.4.61697 or...

CVE-2014-4013: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-2269

The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in...

Design/Logic Flaw

The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in...

CVE-2013-2269

The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in...

CVE-2013-2269

The CVE-2013-2269 entry describes a logic flaw in Aruba Networks ClearPass (5.x, 6.0.1, 6.0.2) and Amigopod/ClearPass Guest (3.0–3.9.7) where an attacker can bypass access controls by initiating a guest request, then using parameter manipulation and information from a default holding page to loca...

PT-2013-3631

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions 5.x through 6.0.2 Amigopod/ClearPass Guest versions 3.0 through 3.9.7 Description The issue allows remote attackers to bypass intended access restrictions and approve a request. This is achieved by sending a...

CVE-2013-2269: Undefined Security Weakness

The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in...