CVE-2014-5342

Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2014-6627...

CVE-2014-6621

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting and diagnostics page in production systems, which allows remote attackers to obtain version numbers, module configuration, and other sensitive information by reading the page...

CVE-2014-6624

The Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2014-6626

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, which allows remote attackers to bypass authentication and execute administrative actions via unknown vectors...

CVE-2014-6627

Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2014-5342...

CVE-2014-6625

CVE-2014-6625 concerns Aruba Networks ClearPass Policy Manager. The vulnerability affects ClearPass before 6.3.6 and 6.4.x before 6.4.1, where remote authenticated users can gain privileges. The available documents specify the impact (privilege escalation) and affected versions, but do not disclo...

CVE-2014-6624

Summary: CVE-2014-6624 affects Aruba Networks ClearPass Insight module. The vulnerability exists in ClearPass Insight before 6.3.6 and in 6.4.x before 6.4.1. Affected software: Aruba Networks ClearPass (Insight module); affected versions are <6.3.6 and

CVE-2014-6627

Aruba Networks ClearPass is affected: versions prior to 6.3.5 and 6.4.x prior to 6.4.1 allow remote attackers to execute arbitrary commands via unspecified vectors. The CVE entry notes this as a different issue from CVE-2014-5342; no specific root-cause, vector details, or fixes are provided in t...

CVE-2014-6621

CVE-2014-6621 affects Aruba Networks ClearPass prior to 6.3.6 and 6.4.x prior to 6.4.1, where the troubleshooting/diagnostics page is not disabled in production. This allows remote attackers to read the page and obtain version numbers, module configuration, and other sensitive information. No exp...

CVE-2014-5342

CVE-2014-5342 – Aruba Networks ClearPass : Affected platforms are ClearPass prior to 6.3.5 and 6.4.x prior to 6.4.1. The issue allows remote attackers to execute arbitrary commands via unspecified vectors. The initial description does not provide the explicit root cause or exploitation details be...

CVE-2014-6622

CVE-2014-6622 affects Aruba Networks ClearPass prior to 6.3.6 and 6.4.x prior to 6.4.1. The issue allows remote attackers to determine the validity of filenames through unspecified vectors, implying potential information exposure (confidentiality impact noted as partial). The sources describe the...

CVE-2014-6625

The Policy Manager in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2014-5342: Undefined Security Weakness

Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2014-6627...

PT-2014-7306

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description The issue allows remote attackers to determine the validity of filenames via unspecified vectors. Recommendations For versions...

PT-2014-7305

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description The issue allows remote attackers to obtain sensitive information, including version numbers and module configuration, by...

PT-2014-7309

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description The issue allows remote authenticated users to gain privileges. Recommendations For versions prior to 6.3.6, update to version...

PT-2014-7308

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description The issue affects the Insight module, allowing remote authenticated users to read arbitrary files. Recommendations For versions...

CVE-2014-6627: Improper Access Control

Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2014-5342...

PT-2014-6421

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.5 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description The issue allows remote attackers to execute arbitrary commands. Recommendations For versions prior to 6.3.5, update to version...

PT-2014-7310

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description The issue allows remote attackers to bypass authentication and execute administrative actions. Recommendations For versions pri...