Unscored severity · published Nov 19, 2014
CVE-2014-6624
The Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to read arbitrary files via unspecified vectors
–
CVSS
1.3%
EPSS
No
On KEV
Description
The Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote authenticated users to read arbitrary files via unspecified vectors.
Exploitation
Is it being used?
Exploit prediction (EPSS)1.3% · higher than 70% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CL
Clearpass · Arubanetworks
through 6.3.4; 6.4.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2014-6624
CVE.org
https://www.cve.org/CVERecord?id=CVE-2014-6624
secunia.com
http://secunia.com/advisories/61916
Vendor Advisory
http://www.arubanetworks.com/support/alerts/aid-10282014.txt
www.securityfocus.com
http://www.securityfocus.com/bid/71215
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/98877
More from Clearpass
9.8
CVE-2021-29145
A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1
9.8
CVE-2020-7114
A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, to make changes to certain databases in ClearPass by…
9.8
CVE-2016-4401
Aruba ClearPass Policy Manager before 6.5.7 and 6.6.x before 6.6.2 allows attackers to obtain database credentials
9.8
CVE-2016-2034
SQL injection vulnerability in ClearPass Policy Manager 6.5.x through 6.5.6 and 6.6.0
8.8
CVE-2021-29147
A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1