CVE-2020-7113: A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP…

PriorityP425medium4.9CVSS 3.1

AVNACLPRHUINSUCHINAN

EPSS

0.85%

53.6th percentile

A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP packets resulting in the compromise of some of ClearPass' service accounts. Resolution: Fixed in 6.7.10, 6.8.1, 6.9.0 and higher.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
arubanetworks	clearpass	>= 6.7.0 < 6.7.13	6.7.13
arubanetworks	clearpass	>= 6.8.0 < 6.8.4	6.8.4

CVSS provenance

nvdv3.14.9MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

nvdv2.04.0MEDIUMAV:N/AC:L/Au:S/C:P/I:N/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.