CVE-2020-7120Classic Buffer Overflow in Clearpass Policy Manager

Severity
5.3MEDIUMNVD
EPSS
0.1%
top 78.05%
CISA KEV
Not in KEV
Exploit
No known exploits
Timeline
PublishedFeb 23
Latest updateMay 24

Description

A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in ClearPass OnGuard could allow local authenticated users to cause a buffer overflow condition. A successful exploit could allow a local attacker to execute arbitrary code within the context the binary is running in, which is a lower privileged account.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 1.8 | Impact: 3.4

Affected Packages2 packages

CVEListV5hewlett_packard_enterprise/aruba_clearpass_policy_managerPrior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1

🔴Vulnerability Details

2
GHSA
GHSA-4x66-x689-32wf: A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 62022-05-24
CVEList
CVE-2020-7120: A local authenticated buffer overflow vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 62021-02-23
CVE-2020-7120 — Classic Buffer Overflow | cvebase