Aruba Networks ClearPass Policy Manager CVE-2015-4649 Remote Privilege Escalation Vulnerability

Bugtraq ID:	100539
Class:	Design Error
CVE:	CVE-2015-4649
Remote:	Yes
Local:	No
Published:	Aug 29 2017 12:00AM
Updated:	Aug 29 2017 12:00AM
Credit:	John Fleming of Mission Critical Systems.
Vulnerable:	Arubanetworks ClearPass Policy Manager 6.5.1 Arubanetworks ClearPass Policy Manager 6.5 Arubanetworks ClearPass Policy Manager 6.4.6 Arubanetworks ClearPass Policy Manager 6.4.5 Arubanetworks ClearPass Policy Manager 6.4.2 Arubanetworks ClearPass Policy Manager 6.4.1 Arubanetworks ClearPass Policy Manager 6.4 Arubanetworks ClearPass Policy Manager 6.3.6 Arubanetworks ClearPass Policy Manager 6.3.5 Arubanetworks ClearPass Policy Manager 6.2.6 Arubanetworks ClearPass Policy Manager 6.2 Arubanetworks ClearPass Policy Manager 6.1 Arubanetworks ClearPass Policy Manager 6.4.4 Arubanetworks ClearPass Policy Manager 6.4.3 Arubanetworks ClearPass Policy Manager 6.0
Not Vulnerable:	Arubanetworks ClearPass Policy Manager 6.5.2 Arubanetworks ClearPass Policy Manager 6.4.7

Aruba Networks ClearPass Policy Manager CVE-2015-4649 Remote Privilege Escalation Vulnerability

Aruba Networks ClearPass Policy Manager is prone to a remote privilege-escalation vulnerability.

Remote attackers can exploit this issue to gain elevated root privileges and perform unauthorized actions.

ClearPass Policy Manager 6.5.0, 6.5.1, and versions prior to 6.4.7 are vulnerable.

Aruba Networks ClearPass Policy Manager CVE-2015-4649 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Aruba Networks ClearPass Policy Manager CVE-2015-4649 Remote Privilege Escalation Vulnerability

References:

• Aruba Networks Homepage (Aruba Networks)
  
• ARUBA-PSA-2015-009 Aruba Product Security Advisory (Aruba Networks)