1. Home
  2. CVE Database
  3. CVE-2014-6626
HIGH · 10.0

CVE-2014-6626

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, which allows remote attackers to bypass authentication and execu...

Vulnerability Description

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, which allows remote attackers to bypass authentication and execute administrative actions via unknown vectors.

CVSS Score

10.0

HIGH

AV:N/AC:L/Au:N/C:C/I:C/A:C
Confidentiality
COMPLETE
Integrity
COMPLETE
Availability
COMPLETE

Affected Products

VendorProductVersions
ArubanetworksClearpass<= 6.3.4

Related Weaknesses (CWE)

CWE-284

References

FAQ

What is CVE-2014-6626?

CVE-2014-6626 is a vulnerability with a CVSS score of 10.0 (HIGH). Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not properly restrict access to unspecified administrative functions, which allows remote attackers to bypass authentication and execu...

How severe is CVE-2014-6626?

CVE-2014-6626 has been rated HIGH with a CVSS base score of 10.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2014-6626?

Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Clearpass.