Aruba Networks ClearPass 'Insight' Module Cross Site Request Forgery Vulnerability
BID:71356
Info
Aruba Networks ClearPass 'Insight' Module Cross Site Request Forgery Vulnerability
| Bugtraq ID: | 71356 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-6623 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 07 2014 12:00AM |
| Updated: | Nov 07 2014 12:00AM |
| Credit: | Luke Young of LinkedIn |
| Vulnerable: |
Arubanetworks ClearPass 6.3.5 Arubanetworks ClearPass 6.0.2 Arubanetworks ClearPass 6.0.1 Arubanetworks ClearPass 6.4.0 Arubanetworks ClearPass 6.3.2 Arubanetworks ClearPass 6.3.0 Arubanetworks ClearPass 6.2.6 Arubanetworks ClearPass 6.2.0.54567 Arubanetworks ClearPass 6.2.0 Arubanetworks ClearPass 6.1.4 Arubanetworks ClearPass 6.1.3 Arubanetworks ClearPass 6.1.0 Arubanetworks ClearPass 5.0 |
| Not Vulnerable: |
Arubanetworks ClearPass 6.4.1 Arubanetworks ClearPass 6.3.6 |
Discussion
Aruba Networks ClearPass 'Insight' Module Cross Site Request Forgery Vulnerability
Aruba Networks ClearPass is prone to a cross-site request-forgery vulnerability.
An attacker can leverage this issue to gain unauthorized access to the affected application. Other attacks are also possible.
Aruba Networks ClearPass is prone to a cross-site request-forgery vulnerability.
An attacker can leverage this issue to gain unauthorized access to the affected application. Other attacks are also possible.