ClearPass Policy Manager Multiple Security Vulnerabilities
BID:98722
CVE-2017-5824 | CVE-2017-5825 | CVE-2017-5826 | CVE-2017-5827 | CVE-2017-5828 | CVE-2017-5829 |Info
ClearPass Policy Manager Multiple Security Vulnerabilities
| Bugtraq ID: | 98722 |
| Class: | Unknown |
| CVE: |
CVE-2017-5824 CVE-2017-5825 CVE-2017-5826 CVE-2017-5827 CVE-2017-5828 CVE-2017-5829 |
| Remote: | Yes |
| Local: | No |
| Published: | May 24 2017 12:00AM |
| Updated: | May 24 2017 12:00AM |
| Credit: | Luke Young (@TheBoredEng), fmast, Phil Purviance (@superevr), and V. Harishkumar (@harishkumar0394). |
| Vulnerable: |
Arubanetworks ClearPass Policy Manager 6.5 Arubanetworks ClearPass Policy Manager 6.4.5 Arubanetworks ClearPass Policy Manager 6.4.2 Arubanetworks ClearPass Policy Manager 6.4.1 Arubanetworks ClearPass Policy Manager 6.4 Arubanetworks ClearPass Policy Manager 6.3.6 Arubanetworks ClearPass Policy Manager 6.3.5 Arubanetworks ClearPass Policy Manager 6.2.6 Arubanetworks ClearPass Policy Manager 6.2 Arubanetworks ClearPass Policy Manager 6.6.4 Arubanetworks ClearPass Policy Manager 6.6.3 Arubanetworks ClearPass Policy Manager 6.6.2 Arubanetworks ClearPass Policy Manager 6.6.1 Arubanetworks ClearPass Policy Manager 6.6.0 Arubanetworks ClearPass Policy Manager 6.4.4 Arubanetworks ClearPass Policy Manager 6.4.3 Arubanetworks ClearPass Policy Manager 6.0 |
| Not Vulnerable: |
Arubanetworks ClearPass Policy Manager 6.6.5 |
Discussion
ClearPass Policy Manager Multiple Security Vulnerabilities
ClearPass Policy Manager is prone to multiple unspecified security vulnerabilities:
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials, bypass security restriction, execute arbitrary code, gain elevated privileges and perform unauthorized actions. Failed exploit attempts may result in a denial-of-service condition.
Versions prior to ClearPass Policy Manager 6.6.5 are vulnerable.
ClearPass Policy Manager is prone to multiple unspecified security vulnerabilities:
Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially allowing the attacker to steal cookie-based authentication credentials, bypass security restriction, execute arbitrary code, gain elevated privileges and perform unauthorized actions. Failed exploit attempts may result in a denial-of-service condition.
Versions prior to ClearPass Policy Manager 6.6.5 are vulnerable.
Exploit / POC
ClearPass Policy Manager Multiple Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
ClearPass Policy Manager Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
ClearPass Policy Manager Multiple Security Vulnerabilities
References:
References: