Aruba Clearpass Vulnerabilidad

Cronología

Versión

6.9.0	94
6.9.1	94
6.9.2	94
6.9.3	94
6.9.4	94

Contramedidas

Official Fix	109
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	32

Explotabilidad

High	0
Functional	0
Proof-of-Concept	1
Unproven	0
Not Defined	140

Vector de acceso

Not Defined	0
Physical	0
Local	8
Adjacent	4
Network	129

Autenticación

Not Defined	0
High	6
Low	106
None	29

La interacción del usuario

Not Defined	0
Required	18
None	123

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	9
≤5	16
≤6	17
≤7	46
≤8	38
≤9	12
≤10	3

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	9
≤5	17
≤6	49
≤7	21
≤8	30
≤9	11
≤10	3

VulDB

≤1	0
≤2	0
≤3	2
≤4	13
≤5	22
≤6	9
≤7	52
≤8	19
≤9	20
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	4
≤6	1
≤7	10
≤8	24
≤9	15
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	4
≤7	2
≤8	13
≤9	2
≤10	1

Proveedor

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explotar día 0

<1k	14
<2k	33
<5k	61
<10k	13
<25k	20
<50k	0
<100k	0
≥100k	0

Explotar hoy

<1k	88
<2k	16
<5k	12
<10k	15
<25k	10
<50k	0
<100k	0
≥100k	0

Explotar el volumen del mercado

Affected Versions (81): 2.1, 2.1.0.1, 2.1.0.2, 6.0, 6.1, 6.2, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.3, 6.3.4, 6.4, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.6, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.7, 6.7.1, 6.7.2, 6.7.3, 6.7.4, 6.7.5, 6.7.6, 6.7.7, 6.7.8, 6.7.9, 6.7.11, 6.7.12, 6.7.13, 6.7.14, 6.8, 6.8.1, 6.8.2, 6.8.3, 6.8.4, 6.8.5, 6.8.6, 6.8.7, 6.8.8, 6.8.9, 6.8.9-HF2, 6.9, 6.9.1, 6.9.2, 6.9.3, 6.9.4, 6.9.5, 6.9.6, 6.9.7, 6.9.8, 6.9.9, 6.9.11, 6.9.12, 6.10.1, 6.10.2, 6.10.3, 6.10.4, 6.10.5, 6.10.6, 6.10.7

Tipo de software: Policy Management Software

Fecha de publicación	Base	Temp	Vulnerabilidad	0day	Hoy	Exp	Con	CTI	CVE
2023-10-25	5.4	5.4	Aruba ClearPass Policy Manager Web-based Management Interface escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-43508
2023-10-25	5.5	5.4	Aruba ClearPass Policy Manager Web-based Management Interface vulnerabilidad desconocida	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.03	CVE-2023-43509
2023-10-25	7.4	7.3	Aruba ClearPass Policy Manager Web-based Management Interface sql injection	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-43507
2023-10-25	6.6	6.5	Aruba ClearPass OnGuard Linux Agent Privilege Escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.02	CVE-2023-43506
2023-10-25	5.8	5.7	Aruba ClearPass Policy Manager Web-based Management Interface escalada de privilegios	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-43510
2023-03-22	5.8	5.8	Aruba ClearPass Policy Manager Web-based Management Interface cross site scripting	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-25593
2023-03-22	5.8	5.8	Aruba ClearPass Policy Manager Web-based Management Interface cross site scripting	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-25592
2023-03-22	4.4	4.4	Aruba ClearPass OnGuard Agent divulgación de información	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-25595
2023-03-22	3.9	3.9	Aruba ClearPass Policy Manager divulgación de información	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-25596
2023-03-22	7.1	7.1	Aruba ClearPass Policy Manager Web-based Management Interface escalada de privilegios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.02	CVE-2023-25594
2023-03-22	6.1	6.1	Aruba ClearPass Policy Manager Web-based Management Interface divulgación de información	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-25591
2023-03-22	8.5	8.5	Aruba ClearPass Policy Manager Web-based Management Interface escalada de privilegios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2023-25589
2023-03-22	7.8	7.8	Aruba ClearPass OnGuard Agent escalada de privilegios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2023-25590
2023-01-05	5.4	5.4	Aruba ClearPass Policy Manager Web-based Management Interface cross site scripting	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.05	CVE-2022-43532
2023-01-05	4.9	4.9	Aruba ClearPass Policy Manager OnGuard Agent divulgación de información	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.04	CVE-2022-43540
2023-01-05	4.2	4.2	Aruba ClearPass Policy Manager divulgación de información	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-43539
2023-01-05	8.3	8.3	Aruba ClearPass Policy Manager OnGuard Agent Privilege Escalation	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43535
2023-01-05	8.3	8.3	Aruba ClearPass Policy Manager OnGuard Agent Privilege Escalation	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43533
2023-01-05	8.8	8.8	Aruba ClearPass Policy Manager Web-based Management Interface sql injection	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.02	CVE-2022-43531
2023-01-05	8.8	8.8	Aruba ClearPass Policy Manager Web-based Management Interface sql injection	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.03	CVE-2022-43530
2023-01-05	7.8	7.8	Aruba ClearPass Policy Manager OnGuard Linux Agent Local Privilege Escalation	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43534
2023-01-05	7.2	7.2	Aruba ClearPass Policy Manager Web-based Management Interface escalada de privilegios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43538
2023-01-05	7.2	7.2	Aruba ClearPass Policy Manager Web-based Management Interface escalada de privilegios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43537
2023-01-05	7.7	7.7	Aruba ClearPass Policy Manager Web-based Management Interface escalada de privilegios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43536
2022-09-21	4.3	4.3	Aruba ClearPass Policy Manager Web-based Management Interface cross site request forgery	$0-$5k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-23685