Aruba ClearPass Policy Manager 命令注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A command injection vulnerability exists in the ClearPass CLI of Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, which can be exploited by an attacker to execute arbitrary commands on the...

Aruba ClearPass Policy Manager 命令注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A command injection vulnerability in the ClearPass web management interface in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute arbitrary commands o...

Aruba ClearPass Policy Manager 安全漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. An elevation of privilege vulnerability exists in ClearPass OnGuard prior to Aruba ClearPass Policy Manager versions 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, which can be exploited by a locally authenticated user on Windows platfor...

Aruba ClearPass Policy Manager 命令注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A command injection vulnerability in the ClearPass web management interface in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute arbitrary commands o...

Aruba ClearPass Policy Manager Prior 命令注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A command injection vulnerability in the ClearPass web management interface in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute arbitrary commands o...

Aruba ClearPass Policy Manager 安全漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A buffer overflow vulnerability exists in ClearPass OnGuard in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, which can be exploited by a local attacker to execute arbitrary code in the...

Aruba ClearPass Policy Manager SQL注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. An SQL injection vulnerability exists in the ClearPass Web Management Interface API in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, which can be exploited by an attacker to obtain and...

Aruba ClearPass Policy Manager 命令注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A command injection vulnerability in the ClearPass web management interface in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute arbitrary commands o...

Aruba ClearPass Policy Manager 跨站脚本漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A reflective cross-site scripting vulnerability in the client portal interface of Aruba ClearPass Policy Manager versions prior to 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute arbitrary script...

Aruba ClearPass Policy Manager SQL注入漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. An SQL injection vulnerability exists in the ClearPass Web Management Interface API in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1, which can be exploited by an attacker to obtain and...

Aruba ClearPass Policy Manager Prior 跨站脚本漏洞

Aruba ClearPass Policy Manager is a network access control NAC solution. A stored cross-site scripting vulnerability in the ClearPass web administration interface in versions prior to Aruba ClearPass Policy Manager 6.9.5, 6.8.8-HF1, and 6.7.14-HF1 can be exploited by an attacker to execute...

HPESBNW04089 rev.2 - Aruba ClearPass Policy Manager, Multiple Vulnerabilities

Potential Security Impact: Remote: Authentication Bypass, Escalation of Privilege, Execution of Arbitrary Commands, Unauthenticated Arbitrary Code Execution, Unauthorized Access, Server-Side Request Forgery SSRF SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Polic...

Vulnerabilities fixed in ClearPass Policy Manager

Vulnerabilities have been fixed in ClearPass Policy Manager. The vulnerabilities allow a malicious party to conduct attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS. Remote code execution Administrator/Root rights SQL Injection Increased user...

CVE-2020-1688

On Juniper Networks SRX Series and NFX Series, a local authenticated user with access to the shell may obtain the Web API service private key that is used to provide encrypted communication between the Juniper device and the authenticator services. Exploitation of this vulnerability may allow an...

HPESBNW04041 rev.3 - Aruba Products, TCP SACK PANIC - Kernel Vulnerabilities

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Airwave Software 8.2.9.1 and below Aruba ClearPass Policy Manager 6.7.12, 6.8.3 and below Aruba CX 6200F Switch Series 10.2 and below Aruba 6300 Switch Series 10.2 and bel...

Aruba ClearPass Policy Manager tipsSimulationUpload command execution

Added: 08/13/2020 CVE: CVE-2020-7115 Background Aruba ClearPass is a network access control solution. Problem A vulnerability in the tipsSimulationUpload.action resource allows remote attackers to execute arbitrary commands by uploading a shared object library in the uploadClientCertFile paramete...

Aruba ClearPass Policy Manager tipsSimulationUpload command execution

Added: 08/13/2020 CVE: CVE-2020-7115 Background Aruba ClearPass is a network access control solution. Problem A vulnerability in the tipsSimulationUpload.action resource allows remote attackers to execute arbitrary commands by uploading a shared object library in the uploadClientCertFile paramete...

Aruba ClearPass Policy Manager tipsSimulationUpload command execution

Added: 08/13/2020 CVE: CVE-2020-7115 Background Aruba ClearPass is a network access control solution. Problem A vulnerability in the tipsSimulationUpload.action resource allows remote attackers to execute arbitrary commands by uploading a shared object library in the uploadClientCertFile paramete...

Aruba ClearPass Policy Manager <= 6.6.10 / 6.7.x < 6.7.6 Multiple Vulnerabilities

The version of Aruba ClearPass Policy Manager installed on the remote host is equal or prior to 6.6.10, or 6.7.x prior to 6.7.6. It is, therefore, affected by multiple vulnerabilities: - An XML external entity XXE vulnerability exists due to an incorrectly configured XML parser accepting XML...

HPESBNW04013 rev.2 - HPE Aruba ClearPass Policy Manager, Remote Code Execution

Potential Security Impact: Remote: Code Execution SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba ClearPass Policy Manager Versions prior to 6.9.1, 6.8.5-HF, 6.7.13-HF CVSS Scores: | CVE | CVSS Vector | Base Score | | --- | --- | --- | | CVE-2020-7115 |...