CVE-2017-9001

Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failures through SSH. When this feature is enabled, an unauthenticated remote command execution vulnerability is present which could allow an unauthenticated user to execute arbitrary commands on the underlying operating system with "root" privilege level. This vulnerability is only present when a specific feature has been enabled. The SSH Lockout feature is not enabled by default, so only systems which have enabled this feature are vulnerable.

CVSS v3 8.1 HIGH
CVSS v2.0 9.3 HIGH

8.1^/10

CVSS v3 : HIGH

Vector : AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

9.3^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt	Mitigation Vendor Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt	Mitigation Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*

History

21 Nov 2024, 03:35

Type	Values Removed	Values Added
References	~~() https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt - Mitigation, Vendor Advisory~~	() https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt - Mitigation, Vendor Advisory

Information

Published : 2018-08-06 20:29

Updated : 2024-11-21 03:35

NVD link : CVE-2017-9001

Mitre link : CVE-2017-9001

CVE.ORG link : CVE-2017-9001

JSON object : View

Products Affected

hp

aruba_clearpass_policy_manager

CWE

NVD-CWE-noinfo

{"id": "CVE-2017-9001", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 9.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "MEDIUM", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "acInsufInfo": false, "impactScore": 10.0, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}]}, "published": "2018-08-06T20:29:01.287", "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt", "tags": ["Mitigation", "Vendor Advisory"], "source": "security-alert@hpe.com"}, {"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2017-004.txt", "tags": ["Mitigation", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "descriptions": [{"lang": "en", "value": "Aruba ClearPass 6.6.3 and later includes a feature called \"SSH Lockout\", which causes ClearPass to lock accounts with too many login failures through SSH. When this feature is enabled, an unauthenticated remote command execution vulnerability is present which could allow an unauthenticated user to execute arbitrary commands on the underlying operating system with \"root\" privilege level. This vulnerability is only present when a specific feature has been enabled. The SSH Lockout feature is not enabled by default, so only systems which have enabled this feature are vulnerable."}, {"lang": "es", "value": "Aruba ClearPass en versiones 6.6.3 y posteriores incluye una caracter\u00edstica llamada \"SSH Lockout\", que provoca que ClearPass bloquee cuentas con demasiados errores de inicio de sesi\u00f3n mediante SSH. Cuando esta caracter\u00edstica est\u00e1 habilitada, una vulnerabilidad de ejecuci\u00f3n remota de comandos no autenticada est\u00e1 presente, lo que podr\u00eda permitir que un usuario no autenticado ejecute comandos arbitrarios en el sistema operativo subyacente con el nivel de privilegios \"root\". Esta vulnerabilidad solo est\u00e1 presente cuando se habilita una caracter\u00edstica en concreto. La caracter\u00edstica SSH Lockout no est\u00e1 habilitada por defecto, por lo que solo los sistemas que tienen esta caracter\u00edstica habilitada son vulnerables."}], "lastModified": "2024-11-21T03:35:08.760", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "47D951FA-4169-431B-B074-1F9DCA035B53", "versionEndExcluding": "6.6.8", "versionStartIncluding": "6.6.3"}], "operator": "OR"}]}], "sourceIdentifier": "security-alert@hpe.com"}