Vulnerabilities fixed in Aruba ClearPass Policy Manager

Aruba has fixed vulnerabilities in ClearPass Policy Manager CPPM. The vulnerabilities potentially enable a malicious person to able to perform attacks that result in the following categories of damage: Cross-Site Request Forgery XSRF Cross-Site Scripting XSS Denial-of-Service DoS. Manipulation of...

HPESBNW04285 rev.4 - Aruba Products, Remote Denial of Service (DoS)

Potential Security Impact: Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba AirWave Management Platform 8.2.14.0 and below Aruba Fabric Composer 6.2.0 and below Aruba ClearPass Policy Manager 6.10.4 and below, 6.9.10 and below, 6.8.9 without Hotf...

HPESBNW04237 rev.4 - HPE Aruba Analytics and Location Engine, Aruba Central On Prem (COP), and Aruba ClearPass Policy Manager, PwnKit (Polkit) Local Escalation of Privilege

Potential Security Impact: Local: Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Analytics and Location Engine 2.2.0.1 and below Aruba ClearPass Policy Manager 6.10.3 and all previous versions Aruba Central On-Premises 2.5.x.x: 2.5.4.2 and below CVSS...

Aruba ClearPass Policy Manager SQL Injection Vulnerability (CNVD-2021-83781)

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a secure access management system for wireless networks.A SQL injection vulnerability exists in Aruba ClearPass Policy Manager, which stems from a remote SQL injection vulnerability in Aruba ClearPass Policy Manager. ...

Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2022-10721)

Aruba ClearPass Policy Manager is an application of Aruba, Inc. that provides wireless network security access management system Aruba ClearPass Policy Manager has a security vulnerability that stems from a remote arbitrary command execution vulnerability in Aruba ClearPass Policy Manager version...

Aruba ClearPass Policy Manager Authorization Issue Vulnerability

Aruba ClearPass Policy Manager is an application from Aruba, Inc. that provides a secure access management system for wireless networks.A security vulnerability exists in Aruba ClearPass Policy Manager, which stems from a remote authentication bypass vulnerability in Aruba ClearPass Policy Manage...

HPE Aruba ClearPass Policy Manager Information Disclosure Vulnerability (CNVD-2021-80169)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.An information disclosure vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to access sensitive information in the web interface...

HPE Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2021-80172)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A remote command injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could exploit the vulnerability to run arbitrary commands on the underlying host...

HPE Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2021-80166)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A remote command injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker can exploit this vulnerability to execute arbitrary commands...

HPE Aruba ClearPass Policy Manager Information Disclosure Vulnerability

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.An information disclosure vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could exploit the vulnerability to access sensitive information, which could lead to elevated privileges...

HPE Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2021-80164)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A remote command injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker can exploit this vulnerability to execute arbitrary commands...

HPE Aruba ClearPass Policy Manager Remote Directory Traversal Vulnerability

HPE Aruba ClearPass Policy Manager is a network access control NAC solution. A directory traversal vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker can exploit the vulnerability to execute arbitrary commands on the server as root user, which could result in complete system...

HPE Aruba ClearPass Policy Manager Information Disclosure Vulnerability (CNVD-2021-80163)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.An information disclosure vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to gain unauthorized access to sensitive information in the web interface...

HPE Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2021-80175)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A remote command injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could exploit the vulnerability to run arbitrary commands on the underlying host...

HPE Aruba ClearPass Policy Manager SQL Injection Vulnerability (CNVD-2021-80170)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A SQL injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use this vulnerability to obtain and modify sensitive information in the underlying database...

HPE Aruba ClearPass Policy Manager Remote Authentication Bypass Vulnerability (CNVD-2021-80173)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution. a security vulnerability exists in the web management interface of HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to access sensitive information on the platform, which could bypass system...

HPE Aruba ClearPass Policy Manager Local Elevation of Privilege Vulnerability

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution. a local elevation of privilege vulnerability exists in the ClearPass OnGuard component of HPE Aruba ClearPass Policy Manager. An attacker could exploit this vulnerability to execute arbitrary code with system-level...

HPE Aruba ClearPass Policy Manager Remote Command Injection Vulnerability (CNVD-2021-80165)

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A remote command injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker can exploit this vulnerability to execute arbitrary commands...

HPE Aruba ClearPass Policy Manager SQL Injection Vulnerability

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution.A SQL injection vulnerability exists in HPE Aruba ClearPass Policy Manager. An attacker could use this vulnerability to obtain and modify information in the underlying database...

HPE Aruba ClearPass Policy Manager Remote Authentication Bypass Vulnerability

HPE Aruba ClearPass Policy Manager is a Network Access Control NAC solution. a security vulnerability exists in the web management interface of HPE Aruba ClearPass Policy Manager. An attacker could use the vulnerability to access sensitive information on the platform, which could bypass system...