CVE-2021-26678

Aruba ClearPass Policy Manager Web UI stores an unauthenticated stored XSS in versions before 6.9.5, 6.8.8-HF1, 6.7.14-HF1. An unauthenticated remote attacker could trigger script execution in the context of the administrative interface. Exploitation details are not provided; impact is limited to...

CVE-2021-26684

A remote authenticated command injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass web-based management interface allows remote authenticated users to run arbitrary commands on the underlying...

CVE-2021-26684

CVE-2021-26684 affects Aruba ClearPass Policy Manager. A remote authenticated command injection vulnerability exists in the ClearPass web-based management interface, allowing an authenticated user to run arbitrary commands on the underlying host with root privileges, potentially leading to full s...

CVE-2021-26682

Aruba ClearPass Policy Manager is affected by a remote reflected XSS in the guest portal interface. Affected versions are prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. The vulnerability could allow an attacker to execute script code in a victim’s browser within the context of the guest portal interf...

CVE-2021-26681

A remote authenticated command Injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the ClearPass CLI could allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo...

CVE-2021-26681

CVE-2021-26681 affects Aruba ClearPass Policy Manager prior to version 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. The vulnerability is a remote authenticated command injection in the ClearPass CLI that could allow an attacker with valid credentials to execute arbitrary commands on the underlying host as r...

CVE-2021-26685

Aruba ClearPass Policy Manager contains a SQL injection vulnerability in the web-based management interface API that is exploitable by an authenticated remote attacker. Affected versions are prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1. Successful exploitation could allow an attacker to obtain and m...

Aruba ClearPass Policy Manager 命令注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A command injection vulnerability in the ClearPass web management interface in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute arbitrary commands o...

Aruba ClearPass Policy Manager 安全漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. An elevation of privilege vulnerability exists in ClearPass OnGuard prior to Aruba ClearPass Policy Manager versions 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, which can be exploited by a locally authenticated user on Windows platfor...

Aruba ClearPass Policy Manager Prior 命令注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A command injection vulnerability in the ClearPass web management interface in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute arbitrary commands o...

Aruba ClearPass Policy Manager 命令注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A command injection vulnerability exists in the ClearPass CLI of Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, which can be exploited by an attacker to execute arbitrary commands on the...

Aruba ClearPass Policy Manager 命令注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A command injection vulnerability in the ClearPass web management interface in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute arbitrary commands o...

Aruba ClearPass Policy Manager 安全漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A buffer overflow vulnerability exists in ClearPass OnGuard in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, which can be exploited by a local attacker to execute arbitrary code in the...

Aruba ClearPass Policy Manager SQL注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. An SQL injection vulnerability exists in the ClearPass Web Management Interface API in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, which can be exploited by an attacker to obtain and...

Aruba ClearPass Policy Manager Prior 跨站脚本漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A stored cross-site scripting vulnerability in the ClearPass web administration interface in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute...

HPESBNW04089 rev.2 - Aruba ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Escalation of Privilege, Execution of Arbitrary Commands, Unauthenticated Arbitrary Code Execution, Unauthorized Access, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Polic...

Vulnerabilities fixed in ClearPass Policy Manager

Vulnerabilities have been fixed in ClearPass Policy Manager. The vulnerabilities allow a malicious party to conduct attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Remote code execution Administrator/Root rights SQL Injection Increased user...

CVE-2021-22985

On BIG-IP APM version 16.0.x before 16.0.1.1, under certain conditions, when processing VPN traffic with APM, TMM consumes excessive memory. A malicious, authenticated VPN user may abuse this to perform a DoS attack against the APM. Note: Software versions which have reached End of Software...

Edge Redirector Cloudlet Gets Faster

Written by Maksym Novoseltsev - Senior Software Engineer, and Jeffrey Costa - Senior Product Manager, Web Performance Cloudlets Policy Manager often takes a long time to load, which is a by-product of its original design where every policy activation is an individual file. These files must be...

Edge Redirector Cloudlet Gets Faster

Cloudlets Policy Manager often takes a long time to load, which is a by-product of its original design where every policy activation is an individual file. These files must be moved around the network, and as you might imagine, transferring thousands of files in a multi-tenant network can take a...