CVE-2020-7116

The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution

published June 3, 2020

CVSS
—
EPSS
3%
Percentile
88.5
In the wild
Unconfirmed
What it is

The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03325 · 88.5th percentile
Published
2020-06-03T12:51Z
EPSS history
Timeline
  • 03 JUN 12:51Z
    The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution
    cvelistv5