CVE-2020-7114 in ClearPass

Resumen

por MITRE

A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, to make changes to certain databases in ClearPass by crafting HTTP packets. As a result of this attack, a possible complete cluster compromise might occur. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 2020-01-16
• Moderación: aceptado
• Artículo: VDB-154021
• CPE: listo
• CWE: CWE-306 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.01089
• KEV: no
• Actividades: muy bajo

Fuentes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7114
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7114
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7114/