PT-2019-7824 · Aruba · Aruba Clearpass Policy Manager

Publicado 2019-11-06 · Atualizado 2019-11-08 · CVE-2016-4401

Positive Technologies (AI Summary)

CVSS v2.0

10

Crítica

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.5.7 Aruba ClearPass Policy Manager versions 6.6.x prior to 6.6.2

Description The issue allows attackers to obtain database credentials.

Recommendations For versions prior to 6.5.7, update to version 6.5.7 or later. For versions 6.6.x prior to 6.6.2, update to version 6.6.2 or later.

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

CVE-2016-4401

Produtos afetados

Aruba Clearpass Policy Manager

Referências · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-4401 · Nota de Segurança
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2016-010.txt · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2016-4401 · Aviso do Fabricante