CVE-2018-7065

An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this...

CVE-2018-7065

Aruba ClearPass Policy Manager is affected by an authenticated SQL injection vulnerability (CVE-2018-7065) that could allow an authenticated admin to obtain the 'appadmin' credentials and lead to complete cluster compromise. Affected versions include 6.7.x prior to 6.7.6 and 6.6.10-hotfix; remedi...

CVE-2018-7079

Aruba ClearPass Policy Manager: CVE-2018-7079 describes a guest-authorization failure in ClearPass Guest where certain administrative operations do not enforce privileges, enabling any authenticated administrative user to view, modify, or delete guest users regardless of privilege level. The issu...

CVE-2018-7066

CVE-2018-7066 describes an unauthenticated remote command execution in Aruba ClearPass Policy Manager via the OnConnect feature. A defect in the API used to link other network devices (configuration under CLI Settings for linked devices) could allow a remote attacker to execute arbitrary commands...

CVE-2018-7063

Aruba ClearPass Policy Manager

CVE-2018-7080: Undefined Security Weakness

A vulnerability exists in the firmware of embedded BLE radios that are part of some Aruba Access points. An attacker who is able to exploit the vulnerability could install new, potentially malicious firmware into the AP's BLE radio and could then gain access to the AP's console port. This...

PT-2018-17894

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.7.6 Aruba ClearPass Policy Manager versions prior to 6.6.10-hotfix Description The issue concerns a guest authorization failure in Aruba ClearPass Policy Manager. Certain administrative...

PT-2018-17882

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.7.6 Aruba ClearPass Policy Manager versions prior to 6.6.10-hotfix Description A remote authentication bypass issue in Aruba ClearPass Policy Manager can lead to the complete compromise of a...

PT-2018-17879

Name of the Vulnerable Software and Affected Versions Aruba ClearPass affected versions not specified Description The issue allows disabled API admins to still perform read/write operations under certain circumstances, potentially leading to unauthorized access to the API and complete compromise ...

CVE-2018-7063: Improper Restriction of XML External Entity Reference

In Aruba ClearPass, disabled API admins can still perform read/write operations. In certain circumstances, API admins in ClearPass which have been disabled may still be able to perform read/write operations on parts of the XML API. This can lead to unauthorized access to the API and complete...

CVE-2018-7067: Improper Authentication

A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise. An authentication flaw in all versions of ClearPass could allow an attacker to compromise the entire cluster through a specially crafted API call. Network access to the administrative web...

CVE-2018-7066: Undefined Security Weakness

An unauthenticated remote command execution exists in Aruba ClearPass Policy Manager on linked devices. The ClearPass OnConnect feature permits administrators to link other network devices into ClearPass for the purpose of collecting enhanced information about connected endpoints. A defect in the...

CVE-2018-7065: Improper Neutralization of Special Elements used in an SQL Command

An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this...

CVE-2018-7079: Incorrect Authorization

Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrative user to execute those operations regardless of privilege level. This could allow low-privileg...

PT-2018-17881

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.7.5 Aruba ClearPass Policy Manager versions prior to 6.6.10-hotfix Description An unauthenticated remote command execution issue exists in the ClearPass OnConnect feature, which allows...

PT-2018-17880

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.7.6 Aruba ClearPass Policy Manager versions prior to 6.6.10-hotfix Description An authenticated SQL injection issue in Aruba ClearPass Policy Manager can lead to privilege escalation. This...

Partner Perspectives: Put Access Control in Context with ClearPass and Carbon Black

Paul Kaspian is a Senior Product & Solutions Marketing Manager for Aruba, a Hewlett Packard Enterprise company. Strengthen your security defenses by considering endpoint context in access control decisions. As enterprise security continues to evolve, organizations are constantly deploying new...

Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks

Security researchers have unveiled details of two critical vulnerabilities in Bluetooth Low Energy BLE chips embedded in millions of access points and networking devices used by enterprises around the world. Dubbed BleedingBit, the set of two vulnerabilities could allow remote attackers to execut...

Two New Bluetooth Chip Flaws Expose Millions of Devices to Remote Attacks

Security researchers have unveiled details of two critical vulnerabilities in Bluetooth Low Energy BLE chips embedded in millions of access points and networking devices used by enterprises around the world. Dubbed BleedingBit , the set of two vulnerabilities could allow remote attackers to execu...

Two Zero-Day Bugs Open Millions of Wireless Access Points to Attack

UPDATE Two zero-day vulnerabilities in Bluetooth Low-Energy chips made by Texas Instruments and used in millions of wireless access points open corporate networks to crippling stealth attacks. Adversaries can exploit the bugs by simply being approximately 100 to 300 feet from the vulnerable...