DeutschIn der Originalsprache angezeigt — eine vollständige Übersetzung ist für eine zukünftige Version geplant.
Aruba ClearPass Policy Manager: Mehrere Schwachstellen
Advisory ansehen veröffentlicht 2024-02-27
Ein entfernter Angreifer kann mehrere Schwachstellen in Aruba ClearPass Policy Manager ausnutzen, um beliebigen Code im Kontext des Dienstes auszuführen, vertrauliche Informationen offenzulegen oder Cross-Site Scripting (XSS)-Angriffe durchzuführen.
01
beschreibt (9)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2024-26302US | —OT erhöht | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A… | ||||
| CVE-2024-26301US | medium6.5 | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A… | ||||
| CVE-2024-26300US | medium4.8 | — | ||
A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack against an adm… | ||||
| CVE-2024-26299US | medium4.8 | — | ||
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting (XSS) attack… | ||||
| CVE-2024-26298US | high8.8 | — | ||
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo… | ||||
| CVE-2024-26297US | high8.8 | — | ||
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo… | ||||
| CVE-2024-26296US | high8.8 | — | ||
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo… | ||||
| CVE-2024-26295US | high8.8 | — | ||
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo… | ||||
| CVE-2024-26294US | high8.8 | — | ||
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful explo… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
- GitHub Advisory Database vom 2024-02-27external
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan