CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-7065

An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this vulnerability to gain access to "appadmin" credentials, leading to complete cluster compromise. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.003

EPSS Ranking 53.1%

CVSS Severity

CVSS v3 Score 7.2

CVSS v2 Score 6.5

References

Products affected by CVE-2018-7065

Arubanetworks » Clearpass Policy Manager » Version: N/A

cpe:2.3:a:arubanetworks:clearpass_policy_manager:-
Arubanetworks » Clearpass Policy Manager » Version: 3.0

cpe:2.3:a:arubanetworks:clearpass_policy_manager:3.0
Arubanetworks » Clearpass Policy Manager » Version: 3.0.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:3.0.1
Arubanetworks » Clearpass Policy Manager » Version: 3.5.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:3.5.1
Arubanetworks » Clearpass Policy Manager » Version: 4.0

cpe:2.3:a:arubanetworks:clearpass_policy_manager:4.0
Arubanetworks » Clearpass Policy Manager » Version: 5.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:5.1
Arubanetworks » Clearpass Policy Manager » Version: 5.1.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:5.1.1
Arubanetworks » Clearpass Policy Manager » Version: 5.2

cpe:2.3:a:arubanetworks:clearpass_policy_manager:5.2
Arubanetworks » Clearpass Policy Manager » Version: 6.0.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.0.1
Arubanetworks » Clearpass Policy Manager » Version: 6.0.2

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.0.2
Arubanetworks » Clearpass Policy Manager » Version: 6.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.1
Arubanetworks » Clearpass Policy Manager » Version: 6.1.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.1.1
Arubanetworks » Clearpass Policy Manager » Version: 6.1.2

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.1.2
Arubanetworks » Clearpass Policy Manager » Version: 6.1.3

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.1.3
Arubanetworks » Clearpass Policy Manager » Version: 6.1.4

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.1.4
Arubanetworks » Clearpass Policy Manager » Version: 6.2.0

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.2.0
Arubanetworks » Clearpass Policy Manager » Version: 6.2.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.2.1
Arubanetworks » Clearpass Policy Manager » Version: 6.2.2

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.2.2
Arubanetworks » Clearpass Policy Manager » Version: 6.2.3

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.2.3
Arubanetworks » Clearpass Policy Manager » Version: 6.2.4

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.2.4
Arubanetworks » Clearpass Policy Manager » Version: 6.2.5

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.2.5
Arubanetworks » Clearpass Policy Manager » Version: 6.2.6

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.2.6
Arubanetworks » Clearpass Policy Manager » Version: 6.3.0

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.3.0
Arubanetworks » Clearpass Policy Manager » Version: 6.3.0.60730

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.3.0.60730
Arubanetworks » Clearpass Policy Manager » Version: 6.3.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.3.1
Arubanetworks » Clearpass Policy Manager » Version: 6.3.2

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.3.2
Arubanetworks » Clearpass Policy Manager » Version: 6.3.3

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.3.3
Arubanetworks » Clearpass Policy Manager » Version: 6.3.4

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.3.4
Arubanetworks » Clearpass Policy Manager » Version: 6.3.5

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.3.5
Arubanetworks » Clearpass Policy Manager » Version: 6.3.6

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.3.6
Arubanetworks » Clearpass Policy Manager » Version: 6.4.0

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.4.0
Arubanetworks » Clearpass Policy Manager » Version: 6.4.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.4.1
Arubanetworks » Clearpass Policy Manager » Version: 6.4.2

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.4.2
Arubanetworks » Clearpass Policy Manager » Version: 6.4.3

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.4.3
Arubanetworks » Clearpass Policy Manager » Version: 6.4.4

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.4.4
Arubanetworks » Clearpass Policy Manager » Version: 6.4.5

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.4.5
Arubanetworks » Clearpass Policy Manager » Version: 6.4.6

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.4.6
Arubanetworks » Clearpass Policy Manager » Version: 6.4.7

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.4.7
Arubanetworks » Clearpass Policy Manager » Version: 6.5.0

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.5.0
Arubanetworks » Clearpass Policy Manager » Version: 6.5.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.5.1
Arubanetworks » Clearpass Policy Manager » Version: 6.5.2

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.5.2
Arubanetworks » Clearpass Policy Manager » Version: 6.5.3

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.5.3
Arubanetworks » Clearpass Policy Manager » Version: 6.5.4

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.5.4
Arubanetworks » Clearpass Policy Manager » Version: 6.5.5

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.5.5
Arubanetworks » Clearpass Policy Manager » Version: 6.5.6

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.5.6
Arubanetworks » Clearpass Policy Manager » Version: 6.5.7

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.5.7
Arubanetworks » Clearpass Policy Manager » Version: 6.6.0

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.6.0
Arubanetworks » Clearpass Policy Manager » Version: 6.6.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.6.1
Arubanetworks » Clearpass Policy Manager » Version: 6.6.2

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.6.2
Arubanetworks » Clearpass Policy Manager » Version: 6.6.3

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.6.3
Arubanetworks » Clearpass Policy Manager » Version: 6.6.4

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.6.4
Arubanetworks » Clearpass Policy Manager » Version: 6.6.5

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.6.5
Arubanetworks » Clearpass Policy Manager » Version: 6.6.7

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.6.7
Arubanetworks » Clearpass Policy Manager » Version: 6.6.8

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.6.8
Arubanetworks » Clearpass Policy Manager » Version: 6.6.9

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.6.9
Arubanetworks » Clearpass Policy Manager » Version: 6.7.0

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.7.0
Arubanetworks » Clearpass Policy Manager » Version: 6.7.1

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.7.1
Arubanetworks » Clearpass Policy Manager » Version: 6.7.2

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.7.2
Arubanetworks » Clearpass Policy Manager » Version: 6.7.3

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.7.3
Arubanetworks » Clearpass Policy Manager » Version: 6.7.4

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.7.4
Arubanetworks » Clearpass Policy Manager » Version: 6.7.5

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.7.5

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-7065

Products

Pricing

Contact Us