CVE-2020-7114 in ClearPass

Sumário

de MITRE

A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, to make changes to certain databases in ClearPass by crafting HTTP packets. As a result of this attack, a possible complete cluster compromise might occur. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservar: 16/01/2020
• Moderação: aceite
• Entrada: VDB-154021
• CPE: pronto
• CWE: CWE-306 (confirmado)
• CVSS: 9.8 (NVD)
• EPSS: 0.01089
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2020-7114
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2020-7114
• CVE Details: https://www.cvedetails.com/cve/CVE-2020-7114/