CVE-2015-3657

The CVE-2015-3657 entry concerns Aruba Networks ClearPass Policy Manager. Affected versions are CPPM before 6.4.7 and 6.5.x before 6.5.2. A remote attacker who is an authenticated lower‑level administrator can escalate to Super Admin privileges via unspecified vectors. The vulnerability is descri...

CVE-2015-3656

Aruba Networks ClearPass Policy Manager (CPPM) is affected by CVE-2015-3656. Vulnerability: remote authenticated lower-level administrators can escalate privileges due to failure to properly enforce authorization checks in CPPM versions before 6.4.7 and 6.5.x before 6.5.2. Impact: Privilege escal...

CVE-2015-3656

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain privileges by leveraging failure to properly enforce authorization checks...

CVE-2015-4649

Aruba Networks ClearPass Policy Manager is affected by CVE-2015-4649 in versions before 6.4.7 and 6.5.x before 6.5.2. The issue allows remote authenticated administrators to gain root privileges via unspecified vectors (a different issue from CVE-2015-3654). The connected CNVD entries corroborate...

CVE-2015-3655

Aruba Networks ClearPass Policy Manager is affected by a CSRF vulnerability (CVE-2015-3655) in versions prior to 6.4.7 and 6.5.x prior to 6.5.2. The flaw allows remote attackers to hijack administrator authentication due to improper enforcement of the anti-CSRF token. According to CVSS v3.1, the ...

CVE-2015-3657

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain "Super Admin" privileges via unspecified vectors...

CVE-2015-4649

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different vulnerability than CVE-2015-3654...

Aruba Networks ClearPass Policy Manager Remote Elevation of Privilege Vulnerability

Aruba Networks ClearPass Policy Manager CPPM is a BYOD Bring Your Own Device network access control policy enforcement platform from Aruba Networks. The platform protects next-generation mobile services, improves network access security and simplifies wired, wireless and VPN network operations. A...

Aruba Networks ClearPass Policy Manager SQL Injection Vulnerability

Aruba Networks ClearPass Policy Manager is a BYOD network access control policy enforcement platform. An SQL injection vulnerability in Aruba Networks ClearPass Policy Manager allows remote attackers to construct malicious URIs, trick users into parsing them, and perform malicious actions in the...

CVE-2016-2034

SQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6 and 6.6.0...

CVE-2016-2034

SQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6 and 6.6.0...

Sql injection

SQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6 and 6.6.0...

CVE-2016-2034

SQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6 and 6.6.0...

CVE-2016-2034

CVE-2016-2034 affects Aruba Networks ClearPass Policy Manager, with an SQL injection vulnerability reported for version 6.5.x up to 6.5.6 and 6.6.0. The connected documents confirm the vulnerability exists in ClearPass Policy Manager but do not provide concrete exploit details, affected configura...

HPE Aruba ClearPass Policy Manager Remote Code Execution Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. A remote code execution vulnerability exists in HPE Aruba ClearPass Policy Manager versions prior to 6.6.5. A remote attacker could exploit the vulnerability to execute code...

HPE Aruba ClearPass Policy Manager Security Bypass Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. A security bypass vulnerability exists in versions of HPE Aruba ClearPass Policy Manager prior to 6.6.5. An attacker could exploit this vulnerability to bypass security restrictions...

HPE Aruba ClearPass Policy Manager Remote Code Execution Vulnerability (CNVD-2017-08804)

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. A remote code execution vulnerability exists in HPE Aruba ClearPass Policy Manager versions prior to 6.6.5. A remote attacker could exploit the vulnerability to execute code...

HPE Aruba ClearPass Policy Manager Cross-Site Scripting Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. A cross-site scripting vulnerability exists in versions of HPE Aruba ClearPass Policy Manager prior to 6.6.5. A remote attacker could exploit this vulnerability to inject arbitrary web...

HPE Aruba ClearPass Policy Manager Elevation of Privilege Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. An elevation of privilege vulnerability exists in HPE Aruba ClearPass Policy Manager versions prior to 6.6.5. An attacker could exploit this vulnerability to gain elevated privileges...

HPE Aruba ClearPass Policy Manager Arbitrary Command Execution Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control solution from Hewlett Packard Enterprise HPE. An arbitrary command execution vulnerability exists in HPE Aruba ClearPass Policy Manager versions prior to 6.6.5. An attacker could exploit this vulnerability to execute arbitrary command...