Description
The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | ClearPass Policy Manager | ClearPass 6.9.x prior to 6.9.1 ClearPass 6.8.x prior to 6.8.5-HF ClearPass 6.7.x prior to 6.7.13-HF | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Aruba ClearPass Policy Manager 6.7.0 - Unauthenticated Remote Command Execution EDB-48661 · remote · Jul 10, 2020
GitHub 1 repository
-
Retr02332/CVE-2020-7115 ★ 1 · Jun 30, 2021
Create your malicious engine in seconds
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- WID-SEC-2024-1448 Aruba ClearPass: Mehrere Schwachstellen BSI CERT-Bund (WID) · Nov 11, 2024