Vulnerability Details CVE-2015-3656
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated lower-level administrators to gain privileges by leveraging failure to properly enforce authorization checks.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.4%
CVSS Severity
CVSS v3 Score 7.2
CVSS v2 Score 6.5
References
Products affected by CVE-2015-3656
-
cpe:2.3:a:arubanetworks:clearpass:5.0.1
-
cpe:2.3:a:arubanetworks:clearpass:5.1
-
cpe:2.3:a:arubanetworks:clearpass:5.2
-
cpe:2.3:a:arubanetworks:clearpass:6.0.1
-
cpe:2.3:a:arubanetworks:clearpass:6.0.2
-
cpe:2.3:a:arubanetworks:clearpass:6.1
-
cpe:2.3:a:arubanetworks:clearpass:6.1.0
-
cpe:2.3:a:arubanetworks:clearpass:6.1.1
-
cpe:2.3:a:arubanetworks:clearpass:6.1.2
-
cpe:2.3:a:arubanetworks:clearpass:6.1.3
-
cpe:2.3:a:arubanetworks:clearpass:6.1.4
-
cpe:2.3:a:arubanetworks:clearpass:6.1.4.61696
-
cpe:2.3:a:arubanetworks:clearpass:6.2
-
cpe:2.3:a:arubanetworks:clearpass:6.2.0
-
cpe:2.3:a:arubanetworks:clearpass:6.2.1
-
cpe:2.3:a:arubanetworks:clearpass:6.2.2
-
cpe:2.3:a:arubanetworks:clearpass:6.2.3
-
cpe:2.3:a:arubanetworks:clearpass:6.2.4
-
cpe:2.3:a:arubanetworks:clearpass:6.2.5
-
cpe:2.3:a:arubanetworks:clearpass:6.2.5.61640
-
cpe:2.3:a:arubanetworks:clearpass:6.2.6.62196
-
cpe:2.3:a:arubanetworks:clearpass:6.3
-
cpe:2.3:a:arubanetworks:clearpass:6.3.0.61712
-
cpe:2.3:a:arubanetworks:clearpass:6.3.4
-
cpe:2.3:a:arubanetworks:clearpass:6.4.0
-
cpe:2.3:a:arubanetworks:clearpass:6.4.1
-
cpe:2.3:a:arubanetworks:clearpass:6.4.3
-
cpe:2.3:a:arubanetworks:clearpass:6.4.5
-
cpe:2.3:a:arubanetworks:clearpass:6.5
-
cpe:2.3:a:arubanetworks:clearpass:6.5.1