Overview
- Description
- Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an authenticated user into performing actions on the web administrative interface.
- Source
- security-alert@hpe.com
- NVD status
- Analyzed
Risk scores
CVSS 3.0
- Type
- Primary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
CVSS 2.0
- Type
- Primary
- Base score
- 6.8
- Impact score
- 6.4
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:P/I:P/A:P
Weaknesses
- nvd@nist.gov
- CWE-352
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "EEE9BAD6-C72C-431B-ADF4-CFB5C047BE40",
"versionEndExcluding": "6.6.9",
"versionStartIncluding": "6.6.0"
},
{
"criteria": "cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "76641E6C-60EA-4B60-BA17-1F14F803CC8D",
"versionEndExcluding": "6.7.1",
"versionStartIncluding": "6.7.0"
}
],
"operator": "OR"
}
]
}
]