CVE-2018-7065
CVE-2018-7065
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.9%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
07 Dec 2018Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
An authenticated SQL injection vulnerability in Aruba ClearPass Policy Manager can lead to privilege escalation. All versions of ClearPass are affected by multiple authenticated SQL injection vulnerabilities. In each case, an authenticated administrative user of any type could exploit this vulnerability to gain access to "appadmin" credentials, leading to complete cluster compromise. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.
Affected products
Hewlett Packard Enterprise · Aruba ClearPass Policy ManagerWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →