Not rated
CVE-2020-7115 The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass
Description
The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| ClearPass Policy Manager | Versions not published |
References
- www.arubanetworks.com www.arubanetworks.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Last modified
Other CVEs of ClearPass Policy Manager
The 7 CVEs of ClearPass Policy Manager →
CVE-2020-7116
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution
Not rated
CVE-2020-7117
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution
Not rated
CVE-2020-7110
ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised…
Not rated
CVE-2020-7113
A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to…
Not rated