2150 matches found
PT-2018-8488
Name of the Vulnerable Software and Affected Versions Aruba ClearPass versions 6.6.3 and later Description The issue is related to the "SSH Lockout" feature, which when enabled, introduces an unauthenticated remote command execution issue. This could allow an unauthenticated user to execute...
PT-2018-8489
Name of the Vulnerable Software and Affected Versions Aruba ClearPass versions prior to 6.6.8 Description The issue allows an attacker to obtain sensitive information, such as session cookies or passwords, by tricking a logged-in administrative user into clicking a malicious link. This can happen...
CVE-2017-9001: Undefined Security Weakness
Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failures through SSH. When this feature is enabled, an unauthenticated remote command execution vulnerability is present which could allow an unauthenticated user t...
PT-2018-17877
Name of the Vulnerable Software and Affected Versions Aruba ClearPass versions prior to 6.6.9 Description The issue affects the API that coordinates cluster actions, allowing an authenticated user with the mon permission to potentially obtain cluster credentials. This could lead to privilege...
CVE-2018-7059: Improper Input Validation
Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon" permission could use this vulnerability to obtain cluster credentials which could allow privilege escalation. This vulnerability is only present when...
CVE-2017-9002: Improper Neutralization of Input During Web Page Generation
All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities. By exploiting this vulnerability, an attacker who can trick a logged-in ClearPass administrative user into clicking a link could obtain sensitive information, such as session cookies or password...
CVE-2017-5826
An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5829
An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5827
A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5828
An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5824
An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5825
A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5825
A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5827
A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5828
An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5824
An unauthenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5826
An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
CVE-2017-5829
An access restriction bypass vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...
