DeutschShown in its original language — a full translation is planned for a future version.
Aruba ClearPass Policy Manager: Mehrere Schwachstellen
view advisory published 2024-02-27
Ein entfernter Angreifer kann mehrere Schwachstellen in Aruba ClearPass Policy Manager ausnutzen, um beliebigen Code im Kontext des Dienstes auszuführen, vertrauliche Informationen offenzulegen oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.
01
describes (9)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-26302US | —OT elevated | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A… | ||||
| CVE-2024-26301US | medium6.5 | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A… | ||||
| CVE-2024-26300US | medium4.8 | — | ||
A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an adm… | ||||
| CVE-2024-26299US | medium4.8 | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack… | ||||
| CVE-2024-26298US | high8.8 | — | ||
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo… | ||||
| CVE-2024-26297US | high8.8 | — | ||
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo… | ||||
| CVE-2024-26296US | high8.8 | — | ||
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo… | ||||
| CVE-2024-26295US | high8.8 | — | ||
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo… | ||||
| CVE-2024-26294US | high8.8 | — | ||
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo… | ||||
02
references
External citations — patches, advisories, analysis.
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan