CVE-2014-6626
HighSummary
Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, allowing remote attackers to bypass authentication and execute administrative actions via unknown vectors.
Risk Assessment
The organization may be exposed to unauthorized access to administrative functions, potentially leading to serious security breaches and loss of control over the system.
Recommendation
It is recommended to update ClearPass to the latest version to mitigate this vulnerability and implement additional security measures to protect administrative access.
Other vulnerabilities in Aruba Networks ClearPass
See all- CVE-2014-6627High
Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors. This is a different vulnerability than CVE-2014-5342.
- CVE-2014-6625High
The Policy Manager in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to gain privileges via unspecified vectors.
- CVE-2014-5342High
Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 is vulnerable to remote command execution by attackers via unspecified vectors. This is a different vulnerability than CVE-2014-6627.
Original NVD description (English source)
Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, which allows remote attackers to bypass authentication and execute administrative actions via unknown vectors.