CVE-2014-6627: Improper Access Control

Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2014-5342...

PT-2014-7309

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description The issue allows remote authenticated users to gain privileges. Recommendations For versions prior to 6.3.6, update to version...

PT-2014-7310

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description The issue allows remote attackers to bypass authentication and execute administrative actions. Recommendations For versions pri...

CVE-2014-6622: Exposure of Sensitive Information to an Unauthorized Actor

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to determine the validity of filenames via unspecified vectors...

CVE-2014-5342: Undefined Security Weakness

Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2014-6627...

PT-2014-6421

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.5 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description The issue allows remote attackers to execute arbitrary commands. Recommendations For versions prior to 6.3.5, update to version...

CVE-2014-6621: Exposure of Sensitive Information to an Unauthorized Actor

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting and diagnostics page in production systems, which allows remote attackers to obtain version numbers, module configuration, and other sensitive information by reading the page...

CVE-2014-6624: Exposure of Sensitive Information to an Unauthorized Actor

The Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

PT-2014-7311

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.5 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description The issue allows remote attackers to execute arbitrary commands. Recommendations For versions prior to 6.3.5, update to version...

CVE-2014-6620

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6623

Cross-site request forgery CSRF vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors...

CVE-2014-6620

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6623

Cross-site request forgery CSRF vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors...

CVE-2014-6620

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 are affected by a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents do not specify the exact root cause, affected components, exploit de...

CVE-2014-6623

CVE-2014-6623 affects Aruba Networks ClearPass Insight module and is a CSRF vulnerability reported to affect versions older than 6.3.6 and 6.4.x older than 6.4.1. The vulnerability allows remote attackers to hijack the authentication of a logged-in user via unspecified vectors. The connected docu...

PT-2014-7307

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description A cross-site request forgery CSRF issue in the Insight module allows remote attackers to hijack the authentication of a logged-...

PT-2014-7304

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6620: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...