PT-2014-7305 · Aruba Networks · Clearpass

Publicado 2014-11-19 · Atualizado 2014-11-19 · CVE-2014-6621

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions prior to 6.3.6 Aruba Networks ClearPass versions 6.4.x prior to 6.4.1

Description The issue allows remote attackers to obtain sensitive information, including version numbers and module configuration, by accessing the troubleshooting and diagnostics page, which is not disabled in production systems.

Recommendations For versions prior to 6.3.6, update to version 6.3.6 or later to resolve the issue. For versions 6.4.x prior to 6.4.1, update to version 6.4.1 or later to resolve the issue. As a temporary workaround, consider disabling access to the troubleshooting and diagnostics page to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-6621

Produtos afetados

Clearpass

Referências · 3

• http://secunia.com/advisories/61916 · Nota
• http://arubanetworks.com/support/alerts/aid-10282014.txt · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2014-6621 · Nota de Segurança