CVE-2018-7060: Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an…

PriorityP337high8.8CVSS 3.0

AVNACLPRNUIRSUCHIHAH

EPSS

0.46%

36.5th percentile

Aruba ClearPass 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1 is vulnerable to CSRF attacks against authenticated users. An attacker could manipulate an authenticated user into performing actions on the web administrative interface.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
arubanetworks	clearpass	>= 6.6.0 < 6.6.9	6.6.9
arubanetworks	clearpass	>= 6.7.0 < 6.7.1	6.7.1
hewlett_packard_enterprise	aruba_clearpass	—	—

CVSS provenance

nvdv3.08.8HIGHCVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.