PT-2014-5683 · Aruba Networks · Clearpass

Published 2014-07-15 · Updated 2014-07-15 · CVE-2014-4031

Positive Technologies (AI Summary)

CVSS v2.0

4.0

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass versions 5.x through 6.1.4.61696 Aruba Networks ClearPass versions 6.2.x through 6.2.6.62196 Aruba Networks ClearPass versions 6.3.x before 6.3.4

Description The issue allows remote authenticated users to obtain database credentials via unspecified vectors.

Recommendations For versions 5.x through 6.1.4.61696, update to a version after 6.1.4.61696. For versions 6.2.x through 6.2.6.62196, update to a version after 6.2.6.62196. For versions 6.3.x before 6.3.4, update to version 6.3.4 or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2014-4031

Affected Products

Clearpass

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2014-4031 · Security Note
• http://arubanetworks.com/support/alerts/aid-07032014.txt · Vendor Advisory
• http://secunia.com/advisories/58936 · Note