Summary
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Aruba ClearPass Policy Manager ausnutzen, um Dateien zu manipulieren und vertrauliche Informationen offenzulegen.
Product
Aruba ClearPass ist eine Netzwerk-Zugangskontrolllösung.
Vulnerabilities 3
-
High 7.2
Authenticated SQL Injection Vulnerability in ClearPass Policy Manager Web-based Management Interface
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit this vulnerability to obta…
-
Medium 6.8
Authenticated Sensitive Information Disclosure in ClearPass Policy Manager
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potenti…
-
Medium 5.8
Authenticated Sensitive Information Disclosure in ClearPass Policy Manager
A vulnerability exists in ClearPass Policy Manager that allows for an attacker with administrative privileges to access sensitive information in a cleartext format. A successful exploit allows an attacker to retrieve information which could be used to potenti…
Revision history
-
#1
Initiale Fassung
References
-
HPE Security Bulletin vom 2024-07-30
https://support.hpe.com/hpesc/public/docDisplay?docId=hpesbnw04675en_us&docLocale=en_US
-
HPE Aruba Networking Product Security Advisory vom 2024-07-30
https://csaf.arubanetworks.com/2024/hpe_aruba_networking_-_hpesbnw04675.txt