CVE-2015-3656: High severity aruba networks clearpass vulnerability
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain privileges by leveraging failure to properly enforce authorization checks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-3656?
CVE-2015-3656 is categorized as a medium severity vulnerability due to improper enforcement of authorization checks.
How do I fix CVE-2015-3656?
To fix CVE-2015-3656, upgrade Aruba Networks ClearPass Policy Manager to version 6.4.7 or 6.5.2 or later.
What types of attacks can CVE-2015-3656 facilitate?
CVE-2015-3656 can allow remote authenticated lower-level administrators to elevate their privileges within the system.
Which versions of Aruba Networks ClearPass are affected by CVE-2015-3656?
CVE-2015-3656 affects Aruba Networks ClearPass versions before 6.4.7 and 6.5.x before 6.5.2.
Who is impacted by CVE-2015-3656?
CVE-2015-3656 impacts organizations using affected versions of Aruba Networks ClearPass, allowing unauthorized privilege escalation.