Privilege escalation

A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5829

An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5825

A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5824

CVE-2017-5824 affects HPE Aruba ClearPass Policy Manager 6.6.x. The vulnerability is an unauthenticated remote code execution flaw that can enable an attacker to execute arbitrary code remotely. CVSS3 vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H with a base score of 9.8 (CRITICAL), indicating high...

CVE-2017-5828

CVE-2017-5828 affects HPE Aruba ClearPass Policy Manager, version 6.6.x. Multiple connected records describe an arbitrary command execution vulnerability in this product family. The CNVD entry further states the issue exists in versions prior to 6.6.5, implying a fix in 6.6.5 or later, but the do...

CVE-2017-5825

CVE-2017-5825 affects HPE Aruba ClearPass Policy Manager 6.6.x. The connected sources describe a privilege-escalation vulnerability in this product, with CVSS v3 base score 8.8 (HIGH), network attack vector, low required privileges, and no user interaction. CNVD-2017-08803 specifies the issue exi...

CVE-2017-5829

CVE-2017-5829 concerns an access restriction bypass in HPE Aruba ClearPass Policy Manager, affecting the 6.6.x line. Multiple trusted sources (NVD and CVE listings) describe a vulnerability that could allow bypassing security controls locally on affected appliances. The CVSS v3.0 score is 7.8 (HI...

CVE-2017-8946

A Remote Code Execution vulnerability in HPE Aruba AirWave Glass version v1.0.0 and 1.0.1 was found...

CVE-2017-5826

CVE-2017-5826 affects HPE Aruba ClearPass Policy Manager 6.6.x. An authenticated remote code execution vulnerability is reported. CNVD notes the vulnerability exists in versions prior to 6.6.5, with remediation to upgrade to 6.6.5 or later. Exploitation details are not provided in the supplied do...

CVE-2017-5827

A verified CVE-2017-5827 entry describes a reflected cross-site scripting (XSS) vulnerability in HPE Aruba ClearPass Policy Manager . Affected software is listed as 6.6.x ; one connected source notes that versions prior to 6.6.5 are affected. The vulnerability stems from an issue in the web inter...

CVE-2017-5827

A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5826

An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5828

An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5824

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-8946

The CVE-2017-8946 entry identifies a Remote Code Execution vulnerability in the HPE Aruba AirWave Glass software, affecting versions v1.0.0 and v1.0.1 . Public descriptions indicate a vulnerability exists in AirWave Glass that could allow an attacker to execute arbitrary code remotely, but the pr...

PT-2018-8285

Name of the Vulnerable Software and Affected Versions HPE Aruba ClearPass Policy Manager version 6.6.x Description A remote code execution issue was discovered, allowing authenticated attackers to execute arbitrary code. Recommendations For HPE Aruba ClearPass Policy Manager version 6.6.x, at the...

CVE-2017-5826: Undefined Security Weakness

An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5824: Undefined Security Weakness

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

PT-2018-8284

Name of the Vulnerable Software and Affected Versions HPE Aruba ClearPass Policy Manager version 6.6.x Description A privilege escalation issue was discovered in the software. Recommendations For HPE Aruba ClearPass Policy Manager version 6.6.x, at the moment, there is no information about a newe...

PT-2018-8457

Name of the Vulnerable Software and Affected Versions HPE Aruba AirWave Glass versions 1.0.0 through 1.0.1 Description A Remote Code Execution issue was discovered in the software. Recommendations For versions 1.0.0 and 1.0.1, at the moment, there is no information about a newer version that...