Aruba Networks CPPM Remote Code Execution Vulnerability (CVE-2014-6628)

Aruba Networks CPPM Remote Code Execution Vulnerability (CVE-2014-6628)
Aruba Networks CPPM Remote Code Execution Vulnerability (CVE-2014-6628)

Release date:
Updated on:

Affected Systems:

Aruba Networks ClearPass Policy Manager <6.5.0

Description:

CVE (CAN) ID: CVE-2014-6628

Aruba Networks ClearPass Policy Manager is an advanced Policy management platform for network access control based on roles and devices.

Aruba Networks ClearPass Policy Manager (CPPM) earlier than 6.5.0 has a security vulnerability. remote administrators can exploit this vulnerability to execute arbitrary code.

<* Source: Luke Young
Cory Scott
*>

Suggestion:

Vendor patch:

Aruba Networks
--------------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:


Http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-006.txt

This article permanently updates the link address: