High WID-SEC-2024-1450 4 CVEs

Aruba ClearPass Policy Manager: Mehrere Schwachstellen

Published Apr 14, 2020 · Updated Nov 11, 2024 · Revision 3 · de-DE

Vendor: Aruba Product: ClearPass Policy Manager

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Aruba ClearPass Policy Manager ausnutzen, um seine Privilegien zu erhöhen, beliebigen Programmcode auszuführen, Informationen offenzulegen oder einen Cross-Site-Scripting-Angriff auszuführen.

Product

Aruba ClearPass ist eine Netzwerk-Zugangskontrolllösung.

Vulnerabilities 4

Unscored —

CVE-2020-7110

ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administ…

Apr 16, 2020
Unscored —

CVE-2020-7111

A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote C…

Apr 16, 2020
Unscored —

CVE-2020-7113

A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to int…

Apr 16, 2020
Unscored —

CVE-2020-7114

A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface,…

Apr 16, 2020

Revision history

2024-11-11 #3
Prüfung Produkteintragung
2024-06-25 #2
Neue Updates von Aruba aufgenommen
2020-04-14 #1
Initiale Fassung

References

Aruba Product Security Advisory: PSA-2020-004 vom 2020-04-14
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-004.txt
Aruba Product Security Advisory ARUBA-PSA-2020-004 vom 2024-06-25
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04016en_us&docLocale=en_US