CVE-2015-3654: Critical severity aruba networks clearpass vulnerability
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different vulnerability than CVE-2015-4649.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3654?
CVE-2015-3654 is considered a high severity vulnerability due to the potential for remote authenticated attackers to gain root privileges.
How do I fix CVE-2015-3654?
To fix CVE-2015-3654, upgrade Aruba Networks ClearPass Policy Manager to version 6.4.7 or 6.5.2 or later.
Who is affected by CVE-2015-3654?
CVE-2015-3654 affects Aruba Networks ClearPass Policy Manager versions prior to 6.4.7 and all 6.5.x versions before 6.5.2.
What type of vulnerability is CVE-2015-3654?
CVE-2015-3654 is a privilege escalation vulnerability allowing remote authenticated administrators to gain root access.
Are there any known exploits for CVE-2015-3654?
As of now, specific public exploits for CVE-2015-3654 have not been widely disclosed.