CVE-2017-5826: Undefined Security Weakness

An authenticated remote code execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5827: Improper Neutralization of Input During Web Page Generation

A reflected cross site scripting vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

CVE-2017-5825: Undefined Security Weakness

A privilege escalation vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

PT-2018-8283

Name of the Vulnerable Software and Affected Versions HPE Aruba ClearPass Policy Manager version 6.6.x Description An unauthenticated remote code execution issue was discovered. Recommendations For HPE Aruba ClearPass Policy Manager version 6.6.x, at the moment, there is no information about a...

CVE-2017-5828: Improper Restriction of XML External Entity Reference

An arbitrary command execution vulnerability in HPE Aruba ClearPass Policy Manager version 6.6.x was found...

PT-2018-8288

Name of the Vulnerable Software and Affected Versions HPE Aruba ClearPass Policy Manager version 6.6.x Description An access restriction bypass issue was discovered in the software. Recommendations For HPE Aruba ClearPass Policy Manager version 6.6.x, at the moment, there is no information about ...

PT-2018-8286

Name of the Vulnerable Software and Affected Versions HPE Aruba ClearPass Policy Manager version 6.6.x Description A reflected cross site scripting issue was discovered in the software. Recommendations For HPE Aruba ClearPass Policy Manager version 6.6.x, update to a version that contains a fix f...

Aruba ClearPass Policy Manager Elevation of Privilege Vulnerability

Aruba ClearPass Policy Manager CPPM is a BYOD Bring Your Own Device network access control policy enforcement platform from Aruba Networks. The platform protects next-generation mobile services, improves network access security and simplifies wired, wireless and VPN network operations. A security...

CVE-2014-2071

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...

Design/Logic Flaw

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...

CVE-2014-2071

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...

CVE-2014-2071

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...

CVE-2014-2071

Aruba ClearPass Policy Manager (CPPM) versions 6.1.x, 6.2.x prior to 6.2.5.61640, and 6.3.x prior to 6.3.0.61712 are affected. When CPPM is configured to use tunneled and non-tunneled EAP methods within a single policy construct, remote authenticated users can escalate privileges by advertising i...

PT-2018-4189

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass Policy Manager versions 6.1.x through 6.2.x before 6.2.5.61640 Aruba Networks ClearPass Policy Manager versions 6.3.x before 6.3.0.61712 Description The issue allows remote authenticated users to gain privileges by...

CVE-2014-2071: Undefined Security Weakness

Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identiti...

The vulnerability of the Aruba Networks ClearPass Policy Manager access control platform, due to deficiencies in access segmentation, allows a perpetrator to execute arbitrary commands.

The vulnerability of the Aruba Networks ClearPass Policy Manager access control platform is related to deficiencies in access segmentation. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the system and execute arbitrary commands with root...

Code injection

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors...

CVE-2015-4650

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors...

CVE-2015-4650

Aruba Networks ClearPass Policy Manager is affected by CVE-2015-4650 in versions prior to 6.4.7 and in the 6.5.x line prior to 6.5.2. Remote attackers can gain shell access and execute arbitrary code with root privileges via unspecified vectors. Mitigations: upgrade to ClearPass 6.4.7 or 6.5.2 (o...

CVE-2015-4650

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors...