CVE-2014-8367

Опубликовано: 25 нояб. 2014

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

SQL injection vulnerability in Aruba Networks ClearPass Policy Manager (CPPM) 6.2.x, 6.3.x before 6.3.6, and 6.4.x before 6.4.2 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Ссылки

http://secunia.com/advisories/62602
Third Party Advisory
http://www.arubanetworks.com/support/alerts/aid-11192014.txt
Broken Link
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/98870
Third Party Advisory
VDB Entry
http://secunia.com/advisories/62602
Third Party Advisory
http://www.arubanetworks.com/support/alerts/aid-11192014.txt
Broken Link
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/98870
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*

Версия от 6.2.0 (включая) до 6.2.6 (включая)

cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*

Версия от 6.3.0 (включая) до 6.3.6 (исключая)

cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*

Версия от 6.4.0 (включая) до 6.4.2 (исключая)

cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.2:*:*:*:*:*:*:*

EPSS

Процентиль: 73%

0.0078

Низкий

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-47qm-5m2m-5rhr

github

больше 3 лет назад

EPSS

Процентиль: 73%

0.0078

Низкий

7.5 High

CVSS2

Дефекты

CWE-89