8.8
CVE-2022-23669
- EPSS 1.02%
- Veröffentlicht 17.05.2022 18:15:08
- Zuletzt bearbeitet 21.11.2024 06:49:03
- Erkennungen
LoginA remote authorization bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Arubanetworks ≫ Clearpass Policy Manager Version <= 6.7.14
Arubanetworks ≫ Clearpass Policy Manager Version >= 6.8.0 < 6.8.9
Arubanetworks ≫ Clearpass Policy Manager Version >= 6.9.0 <= 6.9.9
Arubanetworks ≫ Clearpass Policy Manager Version >= 6.10.0 <= 6.10.4
Arubanetworks ≫ Clearpass Policy Manager Version 6.8.9 Update -
Arubanetworks ≫ Clearpass Policy Manager Version 6.8.9 Update hotfix1
Arubanetworks ≫ Clearpass Policy Manager Version 6.8.9 Update hotfix2
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.02% | 0.599 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
|
| NIST | 6.5 | 8 | 6.4 |
AV:N/AC:L/Au:S/C:P/I:P/A:P
|
CWE-613 Insufficient Session Expiration
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-007.txt