PT-2022-16168 · Aruba · Aruba Clearpass Policy Manager

Published 2022-05-16 · Updated 2022-05-25 · CVE-2022-23659

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Aruba ClearPass Policy Manager versions 6.10.4 and below Aruba ClearPass Policy Manager versions 6.9.9 and below Aruba ClearPass Policy Manager versions 6.8.9-HF2 and below Aruba ClearPass Policy Manager versions 6.7.x and below

Description A remote reflected cross site scripting (xss) vulnerability was discovered in Aruba ClearPass Policy Manager. Aruba has released updates to address this security issue.

Recommendations For versions 6.10.4 and below, update to a version above 6.10.4. For versions 6.9.9 and below, update to a version above 6.9.9. For versions 6.8.9-HF2 and below, update to a version above 6.8.9-HF2. For versions 6.7.x and below, update to a version above 6.7.x.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-23659

Affected Products

Aruba Clearpass Policy Manager

References · 4

• https://arubanetworks.com/assets/alert/ARUBA-PSA-2022-007.txt · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-23659 · Security Note
• https://osv.dev/vulnerability/CVE-2022-23659 · Vendor Advisory
• https://t.me/cibsecurity/42783 · Telegram Post