CVE-2014-4013

Опубликовано: 14 июл. 2014

Источник: nvd

CVSS2: 4.9

EPSS Низкий

Описание

SQL injection vulnerability in the Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors.

Ссылки

http://secunia.com/advisories/58936
http://www.arubanetworks.com/support/alerts/aid-07032014.txt
Vendor Advisory
http://secunia.com/advisories/58936
http://www.arubanetworks.com/support/alerts/aid-07032014.txt
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:arubanetworks:clearpass:5.0.1:*:*:*:*:*:*:*

cpe:2.3:a:arubanetworks:clearpass:5.1:*:*:*:*:*:*:*

cpe:2.3:a:arubanetworks:clearpass:5.2:*:*:*:*:*:*:*

cpe:2.3:a:arubanetworks:clearpass:6.0.1:*:*:*:*:*:*:*

cpe:2.3:a:arubanetworks:clearpass:6.0.2:*:*:*:*:*:*:*

cpe:2.3:a:arubanetworks:clearpass:6.1:*:*:*:*:*:*:*

cpe:2.3:a:arubanetworks:clearpass:6.1.4.61696:*:*:*:*:*:*:*

cpe:2.3:a:arubanetworks:clearpass:6.2:*:*:*:*:*:*:*

cpe:2.3:a:arubanetworks:clearpass:6.2.6.62196:*:*:*:*:*:*:*

cpe:2.3:a:arubanetworks:clearpass:6.3:*:*:*:*:*:*:*

EPSS

Процентиль: 55%

0.00329

Низкий

4.9 Medium

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-rqrc-v2qh-jp48

github

больше 3 лет назад