Vulnerability Description
A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher.
CVSS Score
7.2
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Arubanetworks | Clearpass | >= 6.7.0, < 6.7.13 |
Related Weaknesses (CWE)
References
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-004.txtVendor Advisory
- https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-004.txtVendor Advisory
FAQ
What is CVE-2020-7111?
CVE-2020-7111 is a vulnerability with a CVSS score of 7.2 (HIGH). A server side injection vulnerability exists which could allow an authenticated administrative user to achieve Remote Code Execution in ClearPass. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher.
How severe is CVE-2020-7111?
CVE-2020-7111 has been rated HIGH with a CVSS base score of 7.2/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-7111?
Check the references section above for vendor advisories and patch information. Affected products include: Arubanetworks Clearpass.