CVE-2018-7059: Improper Input Validation

Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon" permission could use this vulnerability to obtain cluster credentials which could allow privilege escalation. This vulnerability is only present when...

PT-2018-17877

Name of the Vulnerable Software and Affected Versions Aruba ClearPass versions prior to 6.6.9 Description The issue affects the API that coordinates cluster actions, allowing an authenticated user with the mon permission to potentially obtain cluster credentials. This could lead to privilege...