A vulnerability in HPE Aruba Networking ClearPass Policy Manager may, under certain circumstances, expose sensitive unencrypted information. Exploiting this vulnerability could allow an attacker to perform a man-in-the-middle attack, potentially granting unauthorized access to network resources as well as enabling data tampering.
The product transmits sensitive or security-critical data in cleartext in a communication channel that can be sniffed by unauthorized actors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Clearpass_policy_manager | Arubanetworks | 6.11.0 (including) | 6.11.10 (excluding) |
| Clearpass_policy_manager | Arubanetworks | 6.12.0 (including) | 6.12.4 (excluding) |