medium4.8
CVE-2020-7110
ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administrator account, to save malicious scripts…
Impact
ClearPass is vulnerable to Stored Cross Site Scripting by allowing a malicious administrator, or a compromised administrator account, to save malicious scripts within ClearPass that could be executed resulting in a privilege escalation attack. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arubanetworks | Clearpass | from 6.7.0 before 6.7.13 from 6.8.0 before 6.8.4 |