CVE-2021-37737: Improper Neutralization of Special Elements used in an SQL Command

A remote SQL injection vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass...

CVE-2021-37738: Missing Authorization

A remote disclosure of sensitive information vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released...

PT-2021-23044

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.10.2 Aruba ClearPass Policy Manager versions prior to 6.9.7-HF1 Aruba ClearPass Policy Manager versions prior to 6.8.9-HF1 Description A remote authentication bypass issue was discovered. Arub...

PT-2021-23033

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions 6.10.x prior to 6.10.2 Aruba ClearPass Policy Manager versions 6.9.x prior to 6.9.7-HF1 Aruba ClearPass Policy Manager versions 6.8.x prior to 6.8.9-HF1 Description A remote arbitrary command execution...

Aruba ClearPass Policy Manager 授权问题漏洞

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution. a security vulnerability exists in the web management interface of HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to access sensitive information on the platform, which could bypass system...

Aruba ClearPass Policy Manager 命令注入漏洞

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A remote command injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker can exploit this vulnerability to execute arbitrary commands...

CVE-2021-40998: Improper Neutralization of Special Elements used in a Command

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager versions: ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for...

Aruba ClearPass Policy Manager SQL注入漏洞

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A SQL injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use this vulnerability to obtain and modify information in the underlying database...

Aruba ClearPass Policy Manager 命令注入漏洞

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A remote command injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could exploit the vulnerability to run arbitrary commands on the underlying host...

Vulnerabilities fixed in Aruba ClearPass Policy Manager

Vulnerabilities have been fixed in Aruba ClearPass Policy Manager. The vulnerabilities allow a malicious party to conduct attacks execute attacks that result in the following categories of damage: Bypassing authentication. Bypassing security measure Remote code execution Administrator/Root...

HPESBNW04203 rev.2 - HPE Aruba ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Local: Escalation of Privilege; Remote: Arbitrary Command Execution, Authentication Bypass, Directory Traversal, Disclosure of Sensitive Information, SQL Injection SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager - - ClearPa...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2021-50187)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager suffers from a command injection vulnerability that originates from the product not doing security checks on user input data, which...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2021-50188)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager suffers from a command injection vulnerability that originates from the product's failure to perform security checks on user input...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2021-50185)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager suffers from a command injection vulnerability that arises from the web interface of the product's ClearPass feature failing to...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2021-50186)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager suffers from a command injection vulnerability that originates from the product not doing security checks on user input data, which...

Aruba ClearPass Policy Manager Command Execution Vulnerability (CNVD-2021-50093)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A security vulnerability exists in Aruba ClearPass Policy Manager that can be exploited by an attacker to arbitrarily run commands on the underlying host...

Aruba ClearPass Policy Manager Authentication Bypass Vulnerability

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A security vulnerability exists in Aruba ClearPass Policy Manager that can be exploited by an attacker to access some unexpected features on ClearPass...

Aruba ClearPass Policy Manager Denial of Service Vulnerability (CNVD-2021-50090)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. A security vulnerability exists in Aruba ClearPass Policy Manager, which can be exploited by attackers to conduct denial-of-service attacks on the system...

Aruba ClearPass Policy Manager Deserialization Vulnerability

Aruba ClearPass Policy Manager is an application of the U.S. company Aruba to provide wireless network security access management system Aruba ClearPass Policy Manager in 6.10.0, 6.9.6 and 6.8.9 before the existence of deserialization vulnerability, there are no details of the vulnerability...

Aruba ClearPass Policy Manager SQL Injection Vulnerability (CNVD-2021-50092)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a wireless network security access management system. Aruba ClearPass Policy Manager has a security vulnerability that could allow a remote attacker to perform a SQL injection attack on a ClearPass instance...