PT-2015-3342 · Aruba Networks · Clearpass Policy Manager

Publicado 2015-08-18 · Atualizado 2017-11-01 · CVE-2015-4650

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass Policy Manager versions prior to 6.4.7 Aruba Networks ClearPass Policy Manager versions 6.5.x prior to 6.5.2

Description The issue is related to insufficient access control in the Aruba Networks ClearPass Policy Manager platform. It allows a remote attacker to gain shell access and execute arbitrary code with root privileges, or cause a denial of service.

Recommendations For versions prior to 6.4.7, update to version 6.4.7 or later. For versions 6.5.x prior to 6.5.2, update to version 6.5.2 or later.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2017-02516

CVE-2015-4650

Produtos afetados

Clearpass Policy Manager

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2015-4650 · Nota de Segurança
• http://arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-02516 · Nota de Segurança
• http://securityfocus.com/bid/76115 · Nota