2343 matches found
CVE-2020-7116
CVE-2020-7116 affects Aruba Networks ClearPass Policy Manager WebUI. An attacker already authenticated to the administrative interface could perform an authenticated command remote execution, leading to remote code execution on the underlying OS. The vulnerability is addressed by fixes in version...
CVE-2020-7116
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system...
CVE-2020-7117
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system...
CVE-2020-7117
CVE-2020-7117 affects Aruba Networks ClearPass Policy Manager WebUI. The vulnerability is an authenticated command remote execution: if an attacker is already authenticated to the administrative interface, they could execute commands on the underlying OS. Resolution: fixed in 6.7.13-HF, 6.8.5-HF,...
CVE-2020-7115
CVE-2020-7115 affects Aruba Networks ClearPass Policy Manager web interface. The issue enables an authentication bypass which, once bypassed, could allow an attacker to perform an unauthenticated remote code execution on the underlying system. Public sources describe this as a remote code executi...
CVE-2020-7115
The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF...
CVE-2020-7116: Undefined Security Weakness
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system...
PT-2020-19382 · Aruba · Clearpass Policy Manager
Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager versions prior to 6.7.13-HF ClearPass Policy Manager versions prior to 6.8.5-HF ClearPass Policy Manager versions prior to 6.8.6 ClearPass Policy Manager versions prior to 6.9.1 Description: The ClearPass Policy Manag...
CVE-2020-7115: Missing Authentication for Critical Function
The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF...
PT-2020-19384
Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.7.13-HF Aruba ClearPass Policy Manager versions prior to 6.8.5-HF Aruba ClearPass Policy Manager versions prior to 6.8.6 Aruba ClearPass Policy Manager versions prior to 6.9.1 Description The...
PT-2020-19383
Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.7.13-HF Aruba ClearPass Policy Manager versions prior to 6.8.5-HF Aruba ClearPass Policy Manager versions prior to 6.8.6 Aruba ClearPass Policy Manager versions prior to 6.9.1 Description The...
CVE-2020-7117: Undefined Security Weakness
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system...
Aruba Networks ClearPass Policy Manager 6.7.x < 6.7.13 / 6.8.x < 6.8.4 Multiple Vulnerabilities (ARUBA-PSA-2020-004)
The remote host is Aruba Networks HP Clearpass Policy Manager version 6.7.x prior to 6.7.13, or 6.8.x prior to 6.8.4. It is, therefore, vulnerable to multiple security vulnerabilities as described in the vendor advisory ARUBA-PSA-2020-004. C Tenable Network Security, Inc. include'compat.inc'; if...
CVE-2020-5874
On BIG-IP APM 15.0.0-15.0.1.2, 14.1.0-14.1.2.3, and 14.0.0-14.0.1, in certain circumstances, an attacker sending specifically crafted requests to a BIG-IP APM virtual server may cause a disruption of service provided by the Traffic Management MicrokernelTMM...
The vulnerabilities of BIG-IP and BIG-IQ access control and remote authentication mechanisms, related to access control errors, allow attackers to escalate their privileges.
The vulnerability of BIG-IP Access Policy Manager and BIG-IQ access control devices lies in access control errors. Exploiting this vulnerability can allow attackers to increase their privileges...
The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanism lies in errors during the processing of input data, allowing attackers to trigger a service failure.
The vulnerability of the BIG-IP Access Policy Manager’s access control and remote authentication mechanisms is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
PT-2020-2034
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions 15.1.0.1 Description The issue is related to the processing of specially formatted HTTP/3 messages, which may cause the Traffic Management Microkernel TMM to produce a core file. This is also associated with errors in handli...
CVE-2015-1525
audio/AudioPolicyManagerBase.cpp in Android before 5.1 allows attackers to cause a denial of service audiopolicy application outage via a crafted application that provides a NULL device address...
F5 BIG-IP APM Denial of Service Vulnerability (CNVD-2019-41647)
F5 BIG-IP APM is a suite of access and security solutions from F5 USA. The product provides unified access to business-critical applications and networks. A security vulnerability exists in F5 BIG-IP APM. An attacker could exploit the vulnerability to consume large amounts of memory...