A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an unauthenticated remote attacker to create arbitrary users on the platform. A successful exploit allows an attacker to achieve total cluster compromise.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clearpass_policy_manager | Arubanetworks | 6.9.0 (including) | 6.9.13 (including) |
| Clearpass_policy_manager | Arubanetworks | 6.10.0 (including) | 6.10.8 (including) |
| Clearpass_policy_manager | Arubanetworks | 6.11.0 (including) | 6.11.0 (including) |
| Clearpass_policy_manager | Arubanetworks | 6.11.1 (including) | 6.11.1 (including) |