Aller au contenu
en Se connecter
8.8 Élevée

CVE-2022-23685 A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to…

Description

A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to a lack of Cross-Site Request Forgery (CSRF) protection. This could allow a remote unauthenticated attacker to execute arbitrary input against these endpoints if the attacker can convince an authenticated user of the interface to interact with a specially crafted URL in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address this security vulnerability.

Produits et versions touchés

Produit Versions touchées Corrigé en
Aruba ClearPass Policy Manager Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Aruba ClearPass Policy Manager

Les 83 CVE de Aruba ClearPass Policy Manager →
CVE-2022-23692 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote… 8.8 Élevée CVE-2022-23693 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote… 8.8 Élevée CVE-2022-23695 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote… 8.8 Élevée CVE-2022-23694 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote… 8.8 Élevée
Suivre cette CVE