CVE-2018-7067

CVE-2018-7067: vulnerability in Hewlett Packard Enterprise Aruba ClearPass…

Published · Updated

Follow this CVE+ Monitor Aruba ClearPass Policy Manager

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.3%
A Remote Authentication bypass in Aruba ClearPass Policy Manager leads to complete cluster compromise. An authentication flaw in all versions of ClearPass could allow an attacker to compromise the entire cluster through a specially crafted API call. Network access to the administrative web interface is required to exploit this vulnerability. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.
Affected products
Hewlett Packard Enterprise · Aruba ClearPass Policy Manager
Related CVEs — Hewlett Packard Enterprise Aruba ClearPass…

In the same product, most dangerous first.

CVE-2017-5824—CVE-2017-5824EPSS 19.3%CVE-2018-7066—CVE-2018-7066EPSS 3.5%CVE-2017-5826—CVE-2017-5826EPSS 3.3%CVE-2017-5828—CVE-2017-5828EPSS 1.9%CVE-2017-5825—CVE-2017-5825EPSS 1.8%CVE-2018-7079—CVE-2018-7079EPSS 0.9%