CVEvulnerability
CVE-2014-6626
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2014-11-19
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-284
Description
Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, which allows remote attackers to bypass authentication and execute administrative actions via unknown vectors.
Affected configurations
• arubanetworks clearpass (<= 6.3.4)
• arubanetworks clearpass 6.4.0
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- http://secunia.com/advisories/61916 secunia.com
- http://www.arubanetworks.com/support/alerts/aid-10282014.txt Vendor Advisory
- http://secunia.com/advisories/61916 secunia.com
- http://www.arubanetworks.com/support/alerts/aid-10282014.txt Vendor Advisory