CVE-2017-5827

A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5827

A verified CVE-2017-5827 entry describes a reflected cross-site scripting (XSS) vulnerability in HPE Aruba ClearPass Policy Manager . Affected software is listed as 6.6.x ; one connected source notes that versions prior to 6.6.5 are affected. The vulnerability stems from an issue in the web inter...

CVE-2017-5825

A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5824

An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5828

An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5829

CVE-2017-5829 concerns an access restriction bypass in HPE Aruba ClearPass Policy Manager, affecting the 6.6.x line. Multiple trusted sources (NVD and CVE listings) describe a vulnerability that could allow bypassing security controls locally on affected appliances. The CVSS v3.0 score is 7.8 (HI...

CVE-2017-5828

CVE-2017-5828 affects HPE Aruba ClearPass Policy Manager, version 6.6.x. Multiple connected records describe an arbitrary command execution vulnerability in this product family. The CNVD entry further states the issue exists in versions prior to 6.6.5, implying a fix in 6.6.5 or later, but the do...

Aruba ClearPass Policy Manager Elevation of Privilege Vulnerability

Aruba ClearPass Policy Manager CPPM is a BYOD Bring Your Own Device network access control policy enforcement platform from Aruba Networks. The platform protects next-generation mobile services, improves network access security and simplifies wired, wireless and VPN network operations. A security...

Design/Logic Flaw

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...

CVE-2014-2071

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...

CVE-2014-2071

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...

CVE-2014-2071

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...

CVE-2014-2071

Aruba ClearPass Policy Manager (CPPM) versions 6.1.x, 6.2.x prior to 6.2.5.61640, and 6.3.x prior to 6.3.0.61712 are affected. When CPPM is configured to use tunneled and non-tunneled EAP methods within a single policy construct, remote authenticated users can escalate privileges by advertising i...

The vulnerability of the Aruba Networks ClearPass Policy Manager access control platform, due to deficiencies in access segmentation, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Aruba Networks ClearPass Policy Manager access control platform is related to deficiencies in access segmentation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the system and execute arbitrary commands with root...

Code injection

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors...

CVE-2015-4650

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors...

CVE-2015-4650

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors...

CVE-2015-4650

Aruba Networks ClearPass Policy Manager is affected by CVE-2015-4650 in versions prior to 6.4.7 and in the 6.5.x line prior to 6.5.2. Remote attackers can gain shell access and execute arbitrary code with root privileges via unspecified vectors. Mitigations: upgrade to ClearPass 6.4.7 or 6.5.2 (o...

Aruba Networks ClearPass Policy Manager Cross-Site Request Forgery Vulnerability

Aruba Networks ClearPass Policy Manager CPPM is a BYOD Bring Your Own Device network access control policy enforcement platform from Aruba Networks. A cross-site request forgery vulnerability exists in Aruba Networks CPPM versions prior to 6.4.7 and 6.5.x versions prior to 6.5.2. A remote attacke...

Aruba Networks ClearPass Policy Manager elevation of privilege vulnerability (CNVD-2017-26320)

Aruba Networks ClearPass Policy Manager CPPM is a BYOD Bring Your Own Device network access control policy enforcement platform from Aruba Networks. A security vulnerability exists in Aruba Networks CPPM versions prior to 6.4.7 and 6.5.x versions prior to 6.5.2. A remote attacker could exploit th...