critical9.8
CVE-2020-7114
A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, to make changes to certain databases in…
Impact
A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, to make changes to certain databases in ClearPass by crafting HTTP packets. As a result of this attack, a possible complete cluster compromise might occur. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Arubanetworks | Clearpass | from 6.7.0 before 6.7.13 from 6.8.0 before 6.8.4 |