CVE-2020-7116: Critical severity Arubanetworks Clearpass Policy Manager vulnerability
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-7116?
CVE-2020-7116 is classified as a high severity vulnerability due to its ability to enable remote command execution on affected systems.
How do I fix CVE-2020-7116?
To fix CVE-2020-7116, upgrade the Aruba ClearPass Policy Manager to a version beyond 6.8.6 or 6.9.1, depending on your current version.
Which versions of ClearPass Policy Manager are affected by CVE-2020-7116?
CVE-2020-7116 affects Aruba ClearPass Policy Manager versions from 6.7.0 to 6.7.13 and from 6.8.0 to 6.8.6.
What risks are associated with CVE-2020-7116?
The risks associated with CVE-2020-7116 include potential unauthorized remote access and control of the underlying operating system.
Is authentication required to exploit CVE-2020-7116?
Yes, an attacker must be authenticated to the administrative interface of ClearPass Policy Manager to exploit CVE-2020-7116.