PT-2019-7824 · Aruba · Aruba Clearpass Policy Manager

Published 2019-11-06 · Updated 2019-11-08 · CVE-2016-4401

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.5.7 Aruba ClearPass Policy Manager versions 6.6.x prior to 6.6.2

Description The issue allows attackers to obtain database credentials.

Recommendations For versions prior to 6.5.7, update to version 6.5.7 or later. For versions 6.6.x prior to 6.6.2, update to version 6.6.2 or later.

Fix

Insufficiently Protected Credentials

Weakness Enumeration

CWE-522

Related Identifiers

CVE-2016-4401

Affected Products

Aruba Clearpass Policy Manager

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2016-4401 · Security Note
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2016-010.txt · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-4401 · Vendor Advisory