A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker authenticated with low privileges to access sensitive information. A successful exploit allows an attacker to retrieve information which could be used to potentially gain further access to network services supported by ClearPass Policy Manager.
References
| Link | Resource |
|---|---|
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt | Broken Link |
| https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt | Broken Link |
Configurations
Configuration 1 (hide)
|
History
27 Mar 2025, 15:06
| Type | Values Removed | Values Added |
|---|---|---|
| First Time |
Arubanetworks clearpass Policy Manager
Arubanetworks |
|
| References | () https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt - Broken Link | |
| CPE | cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:cumulative_hotfix_patch_3:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:cumulative_hotfix_patch_2:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:-:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:-:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.12.0:*:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:cumulative_hotfix_patch_6:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:cumulative_hotfix_patch_5:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.10.8:cumulative_hotfix_patch_2:*:*:*:*:*:* cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.13:cumulative_hotfix_patch_4:*:*:*:*:*:* |
Information
Published : 2024-02-27 23:15
Updated : 2025-03-27 15:06
NVD link : CVE-2024-26302
Mitre link : CVE-2024-26302
CVE.ORG link : CVE-2024-26302
JSON object : View
Products Affected
arubanetworks
- clearpass_policy_manager
CWE
CWE-276
Incorrect Default Permissions