Lucene search
HpeCVELIST:CVE-2018-7065HistoryDec 07, 2018 - 9:00 p.m.
CVE-2018-7065
2018-12-0721:00:00
hpe
www.cve.org
2
An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this vulnerability to gain access to “appadmin” credentials, leading to complete cluster compromise. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.
CNA Affected
[
{
"product": "Aruba ClearPass Policy Manager",
"vendor": "Hewlett Packard Enterprise",
"versions": [
{
"status": "affected",
"version": "All versions of ClearPass prior to 6.7.6, ClearPass 6.6.10 and earlier without hotfix applied"
}
]
}
]Related
nvd
nvd
CVE-2018-7065
2018-12-07 21:29:01
prion
prion
Sql injection
2018-12-07 21:29:00
cve
cve
CVE-2018-7065
2018-12-07 21:29:01
nessus
nessus