CVE-2014-6627 — Improper Access Control in Clearpass

CWE-284 — Improper Access Control6 documents3 sources
Severity
10.0CRITICALNVD
NVD9.0
EPSS
0.9%
top 24.44%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Arubanetworks Clearpass
Timeline
PublishedNov 19
Latest updateMay 17

Description

Aruba Networks ClearPass before 6.3.5 and 6.4.x before 6.4.1 allows remote attackers to execute arbitrary commands via unspecified vectors, a different vulnerability than CVE-2014-5342.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 8.0 | Impact: 10.0

Affected Packages1 packages

🔴Vulnerability Details

4
GHSA
GHSA-78mm-w2w3-8f3f: Aruba Networks ClearPass before 6↗2022-05-17
▶
GHSA
GHSA-49r2-m5f5-3pvr: Aruba Networks ClearPass before 6↗2022-05-17
▶
CVEList
CVE-2014-5342: Aruba Networks ClearPass before 6↗2014-11-19
▶
CVEList
CVE-2014-6627: Aruba Networks ClearPass before 6↗2014-11-19
▶
CVE-2014-6627 — Improper Access Control in Clearpass | cvebase