CVE-2014-6621: Infoleak
Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting and diagnostics page in production systems, which allows remote attackers to obtain version numbers, module configuration, and other sensitive information by reading the page.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-6621?
CVE-2014-6621 has been classified as a medium severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2014-6621?
To fix CVE-2014-6621, upgrade Aruba Networks ClearPass to version 6.3.6 or 6.4.1 or later.
What types of sensitive information can attackers access due to CVE-2014-6621?
Attackers can access version numbers, module configurations, and other sensitive system information through the vulnerability.
Which versions of Aruba Networks ClearPass are affected by CVE-2014-6621?
CVE-2014-6621 affects Aruba Networks ClearPass versions prior to 6.3.6 and version 6.4.0.
Is CVE-2014-6621 exploitable remotely?
Yes, CVE-2014-6621 is exploitable remotely, allowing attackers to access the troubleshooting and diagnostics page.