Vulnerability · Published Jun 3, 2020 · Assigned by hpe
CVE-2020-7116
High 7.2
In plain English
A high-severity security flaw in ClearPass Policy Manager. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 3.3% (higher than 89% of all known vulnerabilities).
Severity (CVSS NVD)7.2High
Exploit odds (30 days)3.3%top 11.3% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| n/a | ClearPass Policy Manager | ClearPass 6.9.x prior to 6.9.1 ClearPass 6.8.x prior to 6.8.5-HF ClearPass 6.7.x prior to 6.7.13-HF |
References
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-005.txt x_refsource_MISC