CVE-2018-7079

Aruba ClearPass Policy Manager guest authorization failure

published December 7, 2018

CVSS
—
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrative user to execute those operations regardless of privilege level. This could allow low-privilege users to view, modify, or delete guest users. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00941 · 60.6th percentile
Published
2018-12-07T21:00Z
EPSS history
Timeline
  • 07 DEC 21:00Z
    Aruba ClearPass Policy Manager guest authorization failure
    cvelistv5