CVE-2018-7067: High severity aruba clearpass policy manager vulnerability
A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise. An authentication flaw in all versions of ClearPass could allow an attacker to compromise the entire cluster through a specially crafted API call. Network access to the administrative web interface is required to exploit this vulnerability. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-7067?
CVE-2018-7067 is considered a critical vulnerability due to its potential to allow complete cluster compromise.
How do I fix CVE-2018-7067?
To fix CVE-2018-7067, upgrade all affected versions of Aruba ClearPass Policy Manager to a version higher than 6.7.6.
What versions of Aruba ClearPass are affected by CVE-2018-7067?
CVE-2018-7067 affects all versions of Aruba ClearPass Policy Manager up to and including 6.6.10 and versions from 6.7.0 up to 6.7.6.
Can CVE-2018-7067 be exploited remotely?
Yes, CVE-2018-7067 can be exploited remotely through a specially crafted API call.
What are the consequences of exploiting CVE-2018-7067?
Exploitation of CVE-2018-7067 allows an attacker to bypass authentication and potentially compromise the entire Aruba ClearPass cluster.