2018-12-07 22:29:01 2019-10-03 02:03:26

Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrative user to execute those operations regardless of privilege level. This could allow low-privilege users to view, modify, or delete guest users. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

PARTIAL

Integrity

PARTIAL

Availability

PARTIAL
Arubanetworks Clearpass policy manager 3.0 (not an official CPE) Arubanetworks Clearpass policy manager 3.0.1 (not an official CPE) Arubanetworks Clearpass policy manager 3.5.1 (not an official CPE) Arubanetworks Clearpass policy manager 4.0 (not an official CPE) Arubanetworks Clearpass policy manager 5.1 (not an official CPE) Arubanetworks Clearpass policy manager 5.1.1 (not an official CPE) Arubanetworks Clearpass policy manager 5.2 (not an official CPE) Arubanetworks Clearpass policy manager 6.0.1 (not an official CPE) Arubanetworks Clearpass policy manager 6.0.2 - (not an official CPE) Arubanetworks Clearpass policy manager 6.0.2 Cumulative update1 (not an official CPE) Arubanetworks Clearpass policy manager 6.0.2 P2 (not an official CPE) Arubanetworks Clearpass policy manager 6.0.2 P3 (not an official CPE) Arubanetworks Clearpass policy manager 6.0.2 P4 (not an official CPE) Arubanetworks Clearpass policy manager 6.1 (not an official CPE) Arubanetworks Clearpass policy manager 6.1.1 (not an official CPE) Arubanetworks Clearpass policy manager 6.1.2 (not an official CPE) Arubanetworks Clearpass policy manager 6.1.3 (not an official CPE) Arubanetworks Clearpass policy manager 6.1.4 (not an official CPE) Arubanetworks Clearpass policy manager 6.2.0 (not an official CPE) Arubanetworks Clearpass policy manager 6.2.1 (not an official CPE) Arubanetworks Clearpass policy manager 6.2.2 (not an official CPE) Arubanetworks Clearpass policy manager 6.2.3 (not an official CPE) Arubanetworks Clearpass policy manager 6.2.4 (not an official CPE) Arubanetworks Clearpass policy manager 6.2.5 - (not an official CPE) Arubanetworks Clearpass policy manager 6.2.6 (not an official CPE) Arubanetworks Clearpass policy manager 6.3.0 - (not an official CPE) Aruba Networks ClearPass Policy Manager 6.3.0.60730 Arubanetworks Clearpass policy manager 6.3.1 (not an official CPE) Arubanetworks Clearpass policy manager 6.3.2 (not an official CPE) Arubanetworks Clearpass policy manager 6.3.3 (not an official CPE) Arubanetworks Clearpass policy manager 6.3.4 (not an official CPE) Arubanetworks Clearpass policy manager 6.3.5 (not an official CPE) Arubanetworks Clearpass policy manager 6.3.6 (not an official CPE) Arubanetworks Clearpass policy manager 6.4.0 (not an official CPE) Arubanetworks Clearpass policy manager 6.4.1 (not an official CPE) Arubanetworks Clearpass policy manager 6.4.2 (not an official CPE) Arubanetworks Clearpass policy manager 6.4.3 (not an official CPE) Arubanetworks Clearpass policy manager 6.4.4 (not an official CPE) Arubanetworks Clearpass policy manager 6.4.5 (not an official CPE) Arubanetworks Clearpass policy manager 6.4.6 (not an official CPE) Arubanetworks Clearpass policy manager 6.4.7 (not an official CPE) Arubanetworks Clearpass policy manager 6.5.0 (not an official CPE) Arubanetworks Clearpass policy manager 6.5.1 (not an official CPE) Arubanetworks Clearpass policy manager 6.5.2 (not an official CPE) Arubanetworks Clearpass policy manager 6.5.3 (not an official CPE) Arubanetworks Clearpass policy manager 6.5.4 (not an official CPE) Arubanetworks Clearpass policy manager 6.5.5 (not an official CPE) Arubanetworks Clearpass policy manager 6.5.6 (not an official CPE) Arubanetworks Clearpass policy manager 6.5.7 (not an official CPE) Arubanetworks Clearpass policy manager 6.6.0 (not an official CPE) Arubanetworks Clearpass policy manager 6.6.1 (not an official CPE) Arubanetworks Clearpass policy manager 6.6.2 (not an official CPE) Arubanetworks Clearpass policy manager 6.6.3 (not an official CPE) Arubanetworks Clearpass policy manager 6.6.4 (not an official CPE) Arubanetworks Clearpass policy manager 6.6.5 (not an official CPE) Arubanetworks Clearpass policy manager 6.6.7 (not an official CPE) Arubanetworks Clearpass policy manager 6.6.8 (not an official CPE) Arubanetworks Clearpass policy manager 6.6.9 (not an official CPE) Arubanetworks Clearpass policy manager 6.7.0 (not an official CPE) Arubanetworks Clearpass policy manager 6.7.1 (not an official CPE) Arubanetworks Clearpass policy manager 6.7.2 (not an official CPE) Arubanetworks Clearpass policy manager 6.7.3 (not an official CPE) Arubanetworks Clearpass policy manager 6.7.4 (not an official CPE) Arubanetworks Clearpass policy manager 6.7.5 (not an official CPE)