CVE-2018-7058 Vulnerability Details

  /     /     /  

CVE-2018-7058 Metadata Quick Info

CVE Published: 06/08/2018 | CVE Updated: 05/08/2024 | CVE Year: 2018
Source: hpe | Vendor: Hewlett Packard Enterprise | Product: Aruba ClearPass
Status : PUBLISHED

---

CVE-2018-7058 Description

Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to gain administrator privileges on the system. The vulnerability is exposed only on ClearPass web interfaces, including administrative, guest captive portal, and API. Customers who do not expose ClearPass web interfaces to untrusted users are impacted to a lesser extent.

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID:
CWE Name: authentication bypass can lead to server compromise
Source: Hewlett Packard Enterprise

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).