CVEvulnerability
CVE-2015-4650
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2017-10-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-264
Description
Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to gain shell access and execute arbitrary code with root privileges via unspecified vectors.
Affected configurations
• arubanetworks clearpass policy manager (<= 6.4.6)
• arubanetworks clearpass policy manager 6.5.0
• arubanetworks clearpass policy manager 6.5.1
Related
Weakness · not in database (1)
References
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt Vendor Advisory
- http://www.securityfocus.com/bid/76115 Third Party Advisory, VDB Entry
- http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt Vendor Advisory
- http://www.securityfocus.com/bid/76115 Third Party Advisory, VDB Entry