Not rated
CVE-2020-7116 The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution
Description
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ClearPass Policy Manager | Versions not published |
References
- www.arubanetworks.com www.arubanetworks.com
Timeline
- Published
- Last modified
Other CVEs of ClearPass Policy Manager
The 7 CVEs of ClearPass Policy Manager →
CVE-2020-7117
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution
Not rated
CVE-2020-7115
The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass
Not rated
CVE-2020-7110
ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised…
Not rated
CVE-2020-7113
A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to…
Not rated