Critical severity · published Aug 6, 2018
CVE-2018-7058
Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to gain administrator…
9.8
CVSS
3.9%
EPSS
No
On KEV
Description
Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to gain administrator privileges on the system. The vulnerability is exposed only on ClearPass web interfaces, including administrative, guest captive portal, and API. Customers who do not expose ClearPass web interfaces to untrusted users are impacted to a lesser extent.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)3.9% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Aruba ClearPass · Hewlett Packard Enterprise
6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 · source: vendor
AC
Aruba Clearpass Policy Manager · HP
6.6.0 before 6.6.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2018-7058
CVE.org
https://www.cve.org/CVERecord?id=CVE-2018-7058
Vendor Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-003.txt
More from Aruba ClearPass
8.8
CVE-2018-7060
Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users
8.1
CVE-2017-9001
Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failures through SSH
6.1
CVE-2017-9002
All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities