Code injection

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to write to arbitrary files within the underlying operating system and consequently cause a denial of service or gain privileges by leveraging incorrect permission checking...

CVE-2015-3653

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to write to arbitrary files within the underlying operating system and consequently cause a denial of service or gain privileges by leveraging incorrect permission checking...

CVE-2015-3655

Cross-site request forgery CSRF vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication of administrators by leveraging improper enforcement of the anti-CSRF token...

CVE-2015-3656

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain privileges by leveraging failure to properly enforce authorization checks...

CVE-2015-3654

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different vulnerability than CVE-2015-4649...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication of administrators by leveraging improper enforcement of the anti-CSRF token...

CVE-2015-3657

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain "Super Admin" privileges via unspecified vectors...

Design/Logic Flaw

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different vulnerability than CVE-2015-3654...

Authorization

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain privileges by leveraging failure to properly enforce authorization checks...

CVE-2015-3654

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different vulnerability than CVE-2015-4649...

CVE-2015-3655

Cross-site request forgery CSRF vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication of administrators by leveraging improper enforcement of the anti-CSRF token...

CVE-2015-3653

Aruba Networks ClearPass Policy Manager (CPPM) environments are affected by CVE-2015-3653 for CPPM versions prior to 6.4.7 and 6.5.x prior to 6.5.2. The issue allows remote authenticated administrators to write to arbitrary files in the underlying OS due to incorrect permission checking, potentia...

CVE-2015-3653

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to write to arbitrary files within the underlying operating system and consequently cause a denial of service or gain privileges by leveraging incorrect permission checking...

CVE-2015-3654

Aruba Networks ClearPass Policy Manager is affected by CVE-2015-3654 in versions prior to 6.4.7 and 6.5.x prior to 6.5.2. The vulnerability allows remote authenticated administrators to gain root privileges via unspecified vectors. There are no exploits or vectors detailed in the provided documen...

CVE-2015-3657

The CVE-2015-3657 entry concerns Aruba Networks ClearPass Policy Manager. Affected versions are CPPM before 6.4.7 and 6.5.x before 6.5.2. A remote attacker who is an authenticated lower‑level administrator can escalate to Super Admin privileges via unspecified vectors. The vulnerability is descri...

CVE-2015-3656

Aruba Networks ClearPass Policy Manager (CPPM) is affected by CVE-2015-3656. Vulnerability: remote authenticated lower-level administrators can escalate privileges due to failure to properly enforce authorization checks in CPPM versions before 6.4.7 and 6.5.x before 6.5.2. Impact: Privilege escal...

CVE-2015-3656

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain privileges by leveraging failure to properly enforce authorization checks...

CVE-2015-3657

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain "Super Admin" privileges via unspecified vectors...

CVE-2015-3655

Aruba Networks ClearPass Policy Manager is affected by a CSRF vulnerability (CVE-2015-3655) in versions prior to 6.4.7 and 6.5.x prior to 6.5.2. The flaw allows remote attackers to hijack administrator authentication due to improper enforcement of the anti-CSRF token. According to CVSS v3.1, the ...

CVE-2015-4649

Aruba Networks ClearPass Policy Manager is affected by CVE-2015-4649 in versions before 6.4.7 and 6.5.x before 6.5.2. The issue allows remote authenticated administrators to gain root privileges via unspecified vectors (a different issue from CVE-2015-3654). The connected CNVD entries corroborate...