CVE-2018-7065: SQL Injection
First published: Fri Dec 07 2018(Updated: )
An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this vulnerability to gain access to "appadmin" credentials, leading to complete cluster compromise. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.
Credit: security-alert@hpe.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Arubanetworks Clearpass Policy Manager | <6.6.10 | |
| Arubanetworks Clearpass Policy Manager | >=6.7.0<6.7.6 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
- collector/nvd-index
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/references
- agent/last-modified-date
- agent/severity
- agent/weakness
- agent/first-publish-date
- agent/type
- agent/event
- agent/description
- agent/tags
- vendor/arubanetworks
- canonical/arubanetworks clearpass policy manager
- version/arubanetworks clearpass policy manager/6.7.0