Vulnerability Description
Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrative user to execute those operations regardless of privilege level. This could allow low-privilege users to view, modify, or delete guest users. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.
CVSS Score
HIGH
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Arubanetworks | Clearpass Policy Manager | < 6.6.10 |
Related Weaknesses (CWE)
References
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-007.txtVendor Advisory
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-007.txtVendor Advisory
FAQ
What is CVE-2018-7079?
CVE-2018-7079 is a vulnerability with a CVSS score of 7.2 (HIGH). Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrat...
How severe is CVE-2018-7079?
CVE-2018-7079 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2018-7079?
Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Clearpass Policy Manager.