CVE-2015-1392: SQL Injection
Published May 28, 2015
·Updated
Multiple SQL injection vulnerabilities in Aruba Networks ClearPass Policy Manager (CPPM) before 6.4.5 allow remote administrators to execute arbitrary SQL commands via unspecified vectors.
Affected Software
1 affected component
Arubanetworks Clearpass Policy Manager<=6.4.4
Event History
May 28, 2015
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-1392?
CVE-2015-1392 has been classified with a medium severity rating due to its potential to allow remote execution of arbitrary SQL commands.
2
How do I fix CVE-2015-1392?
To fix CVE-2015-1392, upgrade Aruba ClearPass Policy Manager to version 6.4.5 or later.
3
What software is affected by CVE-2015-1392?
CVE-2015-1392 affects Aruba ClearPass Policy Manager versions prior to 6.4.5.
4
What are the consequences of exploiting CVE-2015-1392?
Exploitation of CVE-2015-1392 can lead to unauthorized access to the database and manipulation of data.
5
When was CVE-2015-1392 disclosed?
CVE-2015-1392 was disclosed in 2015, specifically in the advisory issued in February of that year.