PT-2017-6693 · Aruba Networks · Clearpass Policy Manager
Publicado
2017-08-29
·
Atualizado
2017-09-07
·
CVE-2015-3656
CVSS v2.0
6.5
Média
| Vetor | AV:N/AC:L/Au:S/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Aruba Networks ClearPass Policy Manager versions prior to 6.4.7
Aruba Networks ClearPass Policy Manager versions 6.5.x prior to 6.5.2
Description
The issue allows remote authenticated lower-level administrators to gain privileges by leveraging failure to properly enforce authorization checks.
Recommendations
For versions prior to 6.4.7, update to version 6.4.7 or later.
For versions 6.5.x prior to 6.5.2, update to version 6.5.2 or later.
Correção
Improper Authorization
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Clearpass Policy Manager