Aruba ClearPass Policy Manager SQL Injection Vulnerability

Aruba ClearPass is an access management system from Aruba Networks that integrates network control, application and device management capabilities. The system manages everything related to BYOD Bring Your Own Device in a single location.Policy Manager is one of the policy managers. An SQL injecti...

CVE-2018-7065: Improper Neutralization of Special Elements used in an SQL Command

An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this...

PT-2018-17880

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.7.6 Aruba ClearPass Policy Manager versions prior to 6.6.10-hotfix Description An authenticated SQL injection issue in Aruba ClearPass Policy Manager can lead to privilege escalation. This...