Aruba Clearpass Vulnerabilidades

Curso de tempo

Versão

6.9.0	94
6.9.1	94
6.9.2	94
6.9.3	94
6.9.4	94

Medidas

Official Fix	109
Temporary Fix	0
Workaround	0
Unavailable	0
Not Defined	32

Explorabilidade

High	0
Functional	0
Proof-of-Concept	1
Unproven	0
Not Defined	140

Tipo de acesso

Not Defined	0
Physical	0
Local	8
Adjacent	4
Network	129

Autenticação

Not Defined	0
High	6
Low	106
None	29

Actividade do utilizador

Not Defined	0
Required	18
None	123

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	9
≤5	16
≤6	17
≤7	46
≤8	38
≤9	12
≤10	3

CVSSv3 Temp

≤1	0
≤2	0
≤3	1
≤4	9
≤5	17
≤6	49
≤7	21
≤8	30
≤9	11
≤10	3

VulDB

≤1	0
≤2	0
≤3	2
≤4	13
≤5	22
≤6	9
≤7	52
≤8	19
≤9	20
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	4
≤6	1
≤7	10
≤8	24
≤9	15
≤10	3

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	2
≤6	4
≤7	2
≤8	13
≤9	2
≤10	1

Fabricante

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Explorar 0 dia

<1k	14
<2k	33
<5k	61
<10k	13
<25k	20
<50k	0
<100k	0
≥100k	0

Explorar hoje

<1k	88
<2k	15
<5k	13
<10k	16
<25k	9
<50k	0
<100k	0
≥100k	0

Affected Versions (81): 2.1, 2.1.0.1, 2.1.0.2, 6.0, 6.1, 6.2, 6.2.1, 6.2.2, 6.2.3, 6.2.4, 6.2.5, 6.3, 6.3.4, 6.4, 6.4.1, 6.4.2, 6.4.3, 6.4.4, 6.4.5, 6.4.6, 6.5, 6.5.1, 6.5.2, 6.5.3, 6.5.4, 6.5.5, 6.5.6, 6.6, 6.6.1, 6.6.2, 6.6.3, 6.6.4, 6.6.5, 6.6.6, 6.6.7, 6.6.8, 6.6.9, 6.7, 6.7.1, 6.7.2, 6.7.3, 6.7.4, 6.7.5, 6.7.6, 6.7.7, 6.7.8, 6.7.9, 6.7.11, 6.7.12, 6.7.13, 6.7.14, 6.8, 6.8.1, 6.8.2, 6.8.3, 6.8.4, 6.8.5, 6.8.6, 6.8.7, 6.8.8, 6.8.9, 6.8.9-HF2, 6.9, 6.9.1, 6.9.2, 6.9.3, 6.9.4, 6.9.5, 6.9.6, 6.9.7, 6.9.8, 6.9.9, 6.9.11, 6.9.12, 6.10.1, 6.10.2, 6.10.3, 6.10.4, 6.10.5, 6.10.6, 6.10.7

Tipo de software: Policy Management Software

Publicado em	Base	Temp	Vulnerabilidade	0day	Hoje	Exp	Mas	CTI	CVE
25/10/2023	5.4	5.4	Aruba ClearPass Policy Manager Web-based Management Interface direitos alargados	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-43508
25/10/2023	5.5	5.4	Aruba ClearPass Policy Manager Web-based Management Interface vulnerabilidade desconhecida	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-43509
25/10/2023	7.4	7.3	Aruba ClearPass Policy Manager Web-based Management Interface Injecção SQL	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-43507
25/10/2023	6.6	6.5	Aruba ClearPass OnGuard Linux Agent Privilege Escalation	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.04	CVE-2023-43506
25/10/2023	5.8	5.7	Aruba ClearPass Policy Manager Web-based Management Interface direitos alargados	$5k-$25k	$0-$5k	Not Defined	Official Fix	0.00	CVE-2023-43510
22/03/2023	5.8	5.8	Aruba ClearPass Policy Manager Web-based Management Interface Roteiro Cruzado de Sítios	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-25593
22/03/2023	5.8	5.8	Aruba ClearPass Policy Manager Web-based Management Interface Roteiro Cruzado de Sítios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2023-25592
22/03/2023	4.4	4.4	Aruba ClearPass OnGuard Agent Divulgação de Informação	$0-$5k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2023-25595
22/03/2023	3.9	3.9	Aruba ClearPass Policy Manager Divulgação de Informação	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2023-25596
22/03/2023	7.1	7.1	Aruba ClearPass Policy Manager Web-based Management Interface direitos alargados	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2023-25594
22/03/2023	6.1	6.1	Aruba ClearPass Policy Manager Web-based Management Interface Divulgação de Informação	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2023-25591
22/03/2023	8.5	8.5	Aruba ClearPass Policy Manager Web-based Management Interface direitos alargados	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2023-25589
22/03/2023	7.8	7.8	Aruba ClearPass OnGuard Agent direitos alargados	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2023-25590
05/01/2023	5.4	5.4	Aruba ClearPass Policy Manager Web-based Management Interface Roteiro Cruzado de Sítios	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.05	CVE-2022-43532
05/01/2023	4.9	4.9	Aruba ClearPass Policy Manager OnGuard Agent Divulgação de Informação	$5k-$25k	$0-$5k	Not Defined	Not Defined	0.04	CVE-2022-43540
05/01/2023	4.2	4.2	Aruba ClearPass Policy Manager Divulgação de Informação	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-43539
05/01/2023	8.3	8.3	Aruba ClearPass Policy Manager OnGuard Agent Privilege Escalation	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43535
05/01/2023	8.3	8.3	Aruba ClearPass Policy Manager OnGuard Agent Privilege Escalation	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43533
05/01/2023	8.8	8.8	Aruba ClearPass Policy Manager Web-based Management Interface Injecção SQL	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.02	CVE-2022-43531
05/01/2023	8.8	8.8	Aruba ClearPass Policy Manager Web-based Management Interface Injecção SQL	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.03	CVE-2022-43530
05/01/2023	7.8	7.8	Aruba ClearPass Policy Manager OnGuard Linux Agent Local Privilege Escalation	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43534
05/01/2023	7.2	7.2	Aruba ClearPass Policy Manager Web-based Management Interface direitos alargados	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43538
05/01/2023	7.2	7.2	Aruba ClearPass Policy Manager Web-based Management Interface direitos alargados	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43537
05/01/2023	7.7	7.7	Aruba ClearPass Policy Manager Web-based Management Interface direitos alargados	$5k-$25k	$5k-$25k	Not Defined	Not Defined	0.00	CVE-2022-43536
21/09/2022	4.3	4.3	Aruba ClearPass Policy Manager Web-based Management Interface Falsificação de Pedido Cross Site	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2022-23685