CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2016-4401
https://notcve.org/view.php?id=CVE-2016-4401
06 Nov 2019 — Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials. Aruba ClearPass Policy Manager versiones anteriores a 6.5.7 y versiones 6.6.x anteriores a 6.6.2, permite a atacantes obtener credenciales de la base de datos. • https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2016-010.txt • CWE-522: Insufficiently Protected Credentials •
CVSS: 7.1EPSS: 0%CPEs: 4EXPL: 0CVE-2014-2071
https://notcve.org/view.php?id=CVE-2014-2071
08 Jan 2018 — Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x before 6.2.5.61640 and 6.3.x before 6.3.0.61712, when configured to use tunneled and non-tunneled EAP methods in a single policy construct, allows remote authenticated users to gain privileges by advertising independent inner and outer identities within a tunneled EAP method. Aruba Networks ClearPass Policy Manager 6.1.x, 6.2.x anteriores a la 6.2.5.61640 y 6.3.x anteriores a la 6.3.0.61712, cuanto está configurado para utilizar métodos EAP con o sin túne... • http://www.arubanetworks.com/assets/alert/aid-050214.asc • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 0CVE-2015-3657
https://notcve.org/view.php?id=CVE-2015-3657
29 Aug 2017 — Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain "Super Admin" privileges via unspecified vectors. Aruba Networks ClearPass Policy Manager en versiones anteriores a la 6.4.7 y en la versión 6.5.x anterior a la 6.5.2 permite que los administradores autenticados remotos de bajo nivel obtengan privilegios "Super Admin" mediante vectores no especificados. • http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt • CWE-284: Improper Access Control •
CVSS: 9.0EPSS: 0%CPEs: 3EXPL: 0CVE-2015-4649
https://notcve.org/view.php?id=CVE-2015-4649
29 Aug 2017 — Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different vulnerability than CVE-2015-3654. Aruba Networks ClearPass Policy Manager en versiones anteriores a la 6.4.7 y en la versión 6.5. x anterior a la 6.5.2 permite que los administradores autenticados remotos obtengan privilegios root mediante vectores no especificados. Esta es una vulnerabilidad diferente a CVE-2015-3654. • http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt • CWE-284: Improper Access Control •
CVSS: 9.0EPSS: 0%CPEs: 3EXPL: 0CVE-2015-3653
https://notcve.org/view.php?id=CVE-2015-3653
29 Aug 2017 — Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to write to arbitrary files within the underlying operating system and consequently cause a denial of service or gain privileges by leveraging incorrect permission checking. Aruba Networks ClearPass Policy Manager en versiones anteriores a la 6.4.7 y en la versión 6.5.x anterior a la 6.5.2 permite a los administradores autenticados remotos escribir en archivos arbitrarios dentro del sistema... • http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt • CWE-284: Improper Access Control •
CVSS: 7.2EPSS: 0%CPEs: 3EXPL: 0CVE-2015-3656
https://notcve.org/view.php?id=CVE-2015-3656
29 Aug 2017 — Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain privileges by leveraging failure to properly enforce authorization checks. Aruba Networks ClearPass Policy Manager en versiones anteriores a la 6.4.7 y en la versión 6.5.x anterior a la 6.5.2 permite que los administradores autenticados remotos de bajo nivel obtengan privilegios al aprovecharse de un fallo en la ejecución de los chequeos de autorización. • http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt • CWE-285: Improper Authorization •
CVSS: 9.0EPSS: 0%CPEs: 3EXPL: 0CVE-2015-3654
https://notcve.org/view.php?id=CVE-2015-3654
29 Aug 2017 — Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to gain root privileges via unspecified vectors, a different vulnerability than CVE-2015-4649. Aruba Networks ClearPass Policy Manager en versiones anteriores a la 6.4.7 y en la versión 6.5.x anterior a la 6.5.2 permite que los administradores autenticados remotos obtengan privilegios root mediante vectores no especificados. Esta es una vulnerabilidad diferente a CVE-2015-4649. • http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt • CWE-284: Improper Access Control •
CVSS: 9.8EPSS: 0%CPEs: 4EXPL: 0CVE-2014-8367
https://notcve.org/view.php?id=CVE-2014-8367
25 Nov 2014 — SQL injection vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Vulnerabilidad de inyección SQL en Aruba Networks ClearPass Policy Manager (CPPM) 6.2.x, 6.3.x anterior a 6.3.6, y 6.4.x anterior a 6.4.2 permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores no especificados. • http://secunia.com/advisories/62602 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2014-5342
https://notcve.org/view.php?id=CVE-2014-5342
19 Nov 2014 — Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2014-6627. Aruba Networks ClearPass anterior a 6.3.5 y 6.4.x anterior a 6.4.1 permite a atacantes remotos ejecutar comandos arbitrarios a través de vectores sin especificar, una vulnerabilidad diferente a CVE-2014-6627. • http://secunia.com/advisories/61916 •
CVSS: 9.8EPSS: 0%CPEs: 2EXPL: 0CVE-2014-6627
https://notcve.org/view.php?id=CVE-2014-6627
19 Nov 2014 — Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2014-5342. Aruba Networks ClearPass anterior a 6.3.5 y 6.4.x anterior a 6.4.1 permite a atacantes remotos ejecutar comandos arbitrarios a través de vectores no especificados, una vulnerabilidad diferente a CVE-2014-5342 • http://secunia.com/advisories/61916 • CWE-284: Improper Access Control •