CVE-2021-29140

A remote XML external entity XXE vulnerability was discovered in Aruba ClearPass Policy Manager versions: Prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability...

CVE-2021-29140

CVE-2021-29140 is an XXE vulnerability in Aruba ClearPass Policy Manager. The issue affects versions prior to 6.9.5, 6.8.9, and 6.7.14‑HF1, where XML external entities could be processed, enabling an attacker to read arbitrary files or cause DoS via specially crafted XML. Aruba released patches t...