8.8
Élevée
CVE-2022-23695 Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote…
Description
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information in the underlying database potentially leading to complete compromise of the ClearPass Policy Manager cluster in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address these security vulnerabilities.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Aruba ClearPass Policy Manager | Versions non publiées |
Références
- www.arubanetworks.com www.arubanetworks.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Aruba ClearPass Policy Manager
Les 83 CVE de Aruba ClearPass Policy Manager →
CVE-2022-23685
A vulnerability in the ClearPass Policy Manager web-based management interface exists which exposes some endpoints to…
8.8
Élevée
CVE-2022-23692
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote…
8.8
Élevée
CVE-2022-23693
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote…
8.8
Élevée
CVE-2022-23694
Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote…
8.8
Élevée