CVE-2021-37736

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -…

published October 15, 2021

CVSS
—
EPSS
2%
Percentile
75.1
In the wild
Unconfirmed
What it is

🚨 A surprising remote authentication bypass lets attackers stroll right in without a password in Aruba ClearPass Policy Manager versions below 6.10.2! It's like a hotel where the front desk has misplaced the guest log—anyone could check in without anyone noticing! 🏨 If exploited, this vulnerability allows attackers to gain unauthorized access to network resources—potentially wreaking havoc by accessing sensitive systems or data. Imagine a villain sneaking through the backdoor and having the run of the place!

Put simply

It's like a hotel where the front desk has misplaced the guest log—anyone could check in without anyone noticing! 🏨 This vulnerability allows unauthenticated users to bypass authentication checks in ClearPass Policy Manager, making it possible for attackers to gain access to systems that should be secured by credentials.

What to do

If exploited, this vulnerability allows attackers to gain unauthorized access to network resources—potentially wreaking havoc by accessing sensitive systems or data. Imagine a villain sneaking through the backdoor and having the run of the place! To safeguard your network, update to ClearPass Policy Manager versions 6.10.2, 6.9.7-HF1, or 6.8.9-HF1. Patching is essential to close this gap and ensure only authorized users can access your resources! You've got this! By updating your systems, you'll be reinforcing your security and keeping those pesky attackers at bay. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01561 · 75.1th percentile
Published
2021-10-15T12:32Z
EPSS history
Timeline
  • 15 OCT 12:32Z
    A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - -…
    cvelistv5