Aruba Networks ClearPass CVE-2014-6625 Remote Privilege Escalation Vulnerability

Bugtraq ID:	71214
Class:	Design Error
CVE:	CVE-2014-6625
Remote:	Yes
Local:	No
Published:	Nov 19 2014 12:00AM
Updated:	Nov 19 2014 12:00AM
Credit:	Luke Young of LinkedIn.
Vulnerable:	Arubanetworks ClearPass 6.0.2 Arubanetworks ClearPass 6.0.1 Arubanetworks ClearPass 6.4.0 Arubanetworks ClearPass 6.3.2 Arubanetworks ClearPass 6.3.0 Arubanetworks ClearPass 6.2.6 Arubanetworks ClearPass 6.2.0 Arubanetworks ClearPass 6.1.4 Arubanetworks ClearPass 6.1.3 Arubanetworks ClearPass 6.1.0 Arubanetworks ClearPass 5.0
Not Vulnerable:	Arubanetworks ClearPass 6.4.1 Arubanetworks ClearPass 6.3.6

Aruba Networks ClearPass CVE-2014-6625 Remote Privilege Escalation Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Aruba Networks ClearPass CVE-2014-6625 Remote Privilege Escalation Vulnerability

References:

• Aruba ClearPass Multiple vulnerabilities (October 2014) (Aruba Networks)
  
• Aruba Networks Homepage (Aruba Networks)
  
• ClearPass Homepage (Aruba Networks)