high7.2
CVE-2020-7111
A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass.
Impact
A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arubanetworks | Clearpass | from 6.7.0 before 6.7.13 from 6.8.0 before 6.8.4 |