Lucene search
HpeCVELIST:CVE-2018-7079HistoryDec 07, 2018 - 9:00 p.m.
CVE-2018-7079
2018-12-0721:00:00
hpe
www.cve.org
1
Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrative user to execute those operations regardless of privilege level. This could allow low-privilege users to view, modify, or delete guest users. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.
CNA Affected
[
{
"product": "Aruba ClearPass Policy Manager",
"vendor": "Hewlett Packard Enterprise",
"versions": [
{
"status": "affected",
"version": "ClearPass 6.7.x prior to 6.7.6, ClearPass 6.6.10 and earlier without hotfix applied"
}
]
}
]Related
prion
prion
Authorization
2018-12-07 21:29:00
nvd
nvd
CVE-2018-7079
2018-12-07 21:29:01
cve
cve
CVE-2018-7079
2018-12-07 21:29:01
nessus
nessus