Medium WID-SEC-2024-0502 9 CVEs

Aruba ClearPass Policy Manager: Mehrere Schwachstellen

Published Feb 27, 2024 · Updated Jun 5, 2024 · Revision 2 · de-DE

Vendor: Aruba Product: ClearPass Policy Manager Platform: Android Platform: iOS Platform: Linux Platform: macOS Platform: Windows

Summary

Ein entfernter Angreifer kann mehrere Schwachstellen in Aruba ClearPass Policy Manager ausnutzen, um beliebigen Code im Kontext des Dienstes auszuführen, vertrauliche Informationen offenzulegen oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.

Product

Aruba ClearPass ist eine Netzwerk-Zugangskontrolllösung.

Vulnerabilities 9

High 7.2

CVE-2024-26294

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …

Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

Feb 27, 2024
High 7.2

CVE-2024-26295

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …

Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

Feb 27, 2024
High 7.2

CVE-2024-26296

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …

Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

Feb 27, 2024
High 7.2

CVE-2024-26297

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …

Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

Feb 27, 2024
High 7.2

CVE-2024-26298

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run …

Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

Feb 27, 2024
Medium 6.6

CVE-2024-26299

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote a…

Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

Feb 27, 2024
Medium 6.6

CVE-2024-26300

A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to cond…

Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

Feb 27, 2024
Medium 6.5

CVE-2024-26301

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authent…

Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

Feb 27, 2024
Medium 4.8

CVE-2024-26302

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authent…

Hewlett Packard Enterprise (HPE) Aruba ClearPass Policy Manager

Feb 27, 2024

Revision history

2024-06-05 #2
Neue Updates von HP aufgenommen
2024-02-27 #1
Initiale Fassung

References

HPE Aruba Networking Product Security Advisory vom 2024-02-27
https://www.arubanetworks.com/security-advisory/clearpass-policy-manager-multiple-vulnerabilities-20/
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-57f3-xqmx-39gv
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-763w-c5w6-4pw8
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-8hf3-685j-g9xf
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-gh72-4xjj-7p87
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-j6mw-3p6q-wxcc
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-jhxw-wgr6-6rqc
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-jxq3-2hwh-v5qg
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-p52j-p77c-rqf9
GitHub Advisory Database vom 2024-02-27
https://github.com/advisories/GHSA-q5ch-6whv-v4gp
HPE Product Security Advisory
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04601en_us&docLocale=en_US