PT-2014-7310

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description The issue allows remote attackers to bypass authentication and execute administrative actions. Recommendations For versions pri...

CVE-2014-6621: Exposure of Sensitive Information to an Unauthorized Actor

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting and diagnostics page in production systems, which allows remote attackers to obtain version numbers, module configuration, and other sensitive information by reading the page...

CVE-2014-6626: Improper Access Control

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, which allows remote attackers to bypass authentication and execute administrative actions via unknown vectors...

CVE-2014-6622: Exposure of Sensitive Information to an Unauthorized Actor

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to determine the validity of filenames via unspecified vectors...

CVE-2014-6625: Improper Access Control

The Policy Manager in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to gain privileges via unspecified vectors...

CVE-2014-6624: Exposure of Sensitive Information to an Unauthorized Actor

The Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to read arbitrary files via unspecified vectors...

CVE-2014-6623

Cross-site request forgery CSRF vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors...

CVE-2014-6620

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors...

CVE-2014-6620

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-6623

Cross-site request forgery CSRF vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors...

CVE-2014-6620

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 are affected by a cross-site scripting (XSS) issue that allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. The connected documents do not specify the exact root cause, affected components, exploit de...

CVE-2014-6623

CVE-2014-6623 affects Aruba Networks ClearPass Insight module and is a CSRF vulnerability reported to affect versions older than 6.3.6 and 6.4.x older than 6.4.1. The vulnerability allows remote attackers to hijack the authentication of a logged-in user via unspecified vectors. The connected docu...

PT-2014-7304

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2014-7307

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1 Description A cross-site request forgery CSRF issue in the Insight module allows remote attackers to hijack the authentication of a logged-...

CVE-2014-6623: Improper Neutralization of Input During Web Page Generation

Cross-site request forgery CSRF vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors...

CVE-2014-6620: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2014-2593

Aruba Networks ClearPass Policy Manager 6.3.0.60730 contains a command injection flaw in its management console, where local users can execute arbitrary shell commands via metacharacters in arguments of valid commands (notably system status-rasession and network ping). This CVE (CVE-2014-2593) is...

CVE-2014-2593

The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the 1 system status-rasession and 2 network ping commands...