A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further privileges on the ClearPass instance.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clearpass_policy_manager | Arubanetworks | 6.9.0 (including) | 6.9.13 (including) |
| Clearpass_policy_manager | Arubanetworks | 6.10.0 (including) | 6.10.8 (including) |
| Clearpass_policy_manager | Arubanetworks | 6.11.0 (including) | 6.11.0 (including) |
| Clearpass_policy_manager | Arubanetworks | 6.11.1 (including) | 6.11.1 (including) |