PT-2021-17090 · Aruba · Aruba Clearpass Policy Manager

Published 2021-02-23 · Updated 2022-07-12 · CVE-2021-26685

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions prior to 6.9.5 Aruba ClearPass Policy Manager version 6.8.8-HF1 Aruba ClearPass Policy Manager version 6.7.14-HF1

Description A remote authenticated SQL Injection issue was discovered in the web-based management interface API of ClearPass, allowing an authenticated remote attacker to conduct SQL injection attacks against the ClearPass instance. This could enable an attacker to obtain and modify sensitive information in the underlying database.

Recommendations For versions prior to 6.9.5, update to version 6.9.5 or later. For version 6.8.8-HF1, update to a version later than 6.8.8-HF1. For version 6.7.14-HF1, update to a version later than 6.7.14-HF1. As a temporary workaround, consider restricting access to the web-based management interface API until a patch is available.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-26685

Affected Products

Aruba Clearpass Policy Manager

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2021-26685 · Security Note
• https://arubanetworks.com/assets/alert/ARUBA-PSA-2021-004.txt · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2021-26685 · Vendor Advisory
• https://t.me/cvenotify/10357 · Telegram Post
• https://t.me/cibsecurity/23999 · Telegram Post