CVE-2014-4031

The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to obtain database credentials via unspecified vectors.

CVSS v2.0 4.0 MEDIUM

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://secunia.com/advisories/58936
http://www.arubanetworks.com/support/alerts/aid-07032014.txt	Vendor Advisory
http://secunia.com/advisories/58936
http://www.arubanetworks.com/support/alerts/aid-07032014.txt	Vendor Advisory

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:arubanetworks:clearpass:5.0.1:::::::*
	cpe:2.3:a:arubanetworks:clearpass:5.1:::::::*
	cpe:2.3:a:arubanetworks:clearpass:5.2:::::::*
	cpe:2.3:a:arubanetworks:clearpass:6.0.1:::::::*
	cpe:2.3:a:arubanetworks:clearpass:6.0.2:::::::*
	cpe:2.3:a:arubanetworks:clearpass:6.1:::::::*
	cpe:2.3:a:arubanetworks:clearpass:6.1.4.61696:::::::*
	cpe:2.3:a:arubanetworks:clearpass:6.2:::::::*
	cpe:2.3:a:arubanetworks:clearpass:6.2.6.62196:::::::*
	cpe:2.3:a:arubanetworks:clearpass:6.3:::::::*

History

21 Nov 2024, 02:09

Type	Values Removed	Values Added
References	~~() http://secunia.com/advisories/58936 -~~	() http://secunia.com/advisories/58936 -
References	~~() http://www.arubanetworks.com/support/alerts/aid-07032014.txt - Vendor Advisory~~	() http://www.arubanetworks.com/support/alerts/aid-07032014.txt - Vendor Advisory

Information

Published : 2014-07-15 14:55

Updated : 2024-11-21 02:09

NVD link : CVE-2014-4031

Mitre link : CVE-2014-4031

CVE.ORG link : CVE-2014-4031

JSON object : View

Products Affected

arubanetworks

clearpass

CWE

CWE-200

Exposure of Sensitive Information to an Unauthorized Actor

{"id": "CVE-2014-4031", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2014-07-15T14:55:10.670", "references": [{"url": "http://secunia.com/advisories/58936", "source": "cve@mitre.org"}, {"url": "http://www.arubanetworks.com/support/alerts/aid-07032014.txt", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://secunia.com/advisories/58936", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.arubanetworks.com/support/alerts/aid-07032014.txt", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-200"}]}], "descriptions": [{"lang": "en", "value": "The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to obtain database credentials via unspecified vectors."}, {"lang": "es", "value": "Policy Manager en Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x hasta 6.1.4.61696, 6.2.x hasta 6.2.6.62196 y 6.3.x anterior a 6.3.4 permite a usuarios remotos autenticados obtener las credenciales de la base de datos a trav\u00e9s de vectores no especificados."}], "lastModified": "2024-11-21T02:09:22.260", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:arubanetworks:clearpass:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EF7324FA-8041-4C79-B630-5912E0AC6880"}, {"criteria": "cpe:2.3:a:arubanetworks:clearpass:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AD0B9F17-CC52-497E-B492-73DFBF6203C0"}, {"criteria": "cpe:2.3:a:arubanetworks:clearpass:5.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "584703D0-5E85-4BDA-A670-6BECF3A71BB7"}, {"criteria": "cpe:2.3:a:arubanetworks:clearpass:6.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6FFFA1B8-1B2B-4DE1-8469-FFEDC9ECF34C"}, {"criteria": "cpe:2.3:a:arubanetworks:clearpass:6.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D10617AC-F939-4CA1-AD63-C192125F2EE5"}, {"criteria": "cpe:2.3:a:arubanetworks:clearpass:6.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ADEE2E01-54D8-4C1B-914B-EA3B31F08871"}, {"criteria": "cpe:2.3:a:arubanetworks:clearpass:6.1.4.61696:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A6D81C26-0DE2-4E8A-AE68-04C0D095B4D4"}, {"criteria": "cpe:2.3:a:arubanetworks:clearpass:6.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6E9826DA-B101-4806-885E-39CEEE27EA36"}, {"criteria": "cpe:2.3:a:arubanetworks:clearpass:6.2.6.62196:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F5F48D14-F418-45D3-8EC1-E2D90DE3F902"}, {"criteria": "cpe:2.3:a:arubanetworks:clearpass:6.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4F1EF5D3-9C7D-4B48-96F3-371AF198CBCB"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}