CVE-2018-7059

Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon" permission could use this vulnerability to obtain cluster credentials which could allow privilege escalation. This vulnerability is only present when authenticated as a user with "mon" permission.

CVSS v3 8.8 HIGH
CVSS v2.0 4.0 MEDIUM

8.8^/10

CVSS v3 : HIGH

Vector : AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

4.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability : 8.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication SINGLE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-003.txt	Vendor Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-003.txt	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*

History

21 Nov 2024, 04:11

Type	Values Removed	Values Added
References	~~() https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-003.txt - Vendor Advisory~~	() https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-003.txt - Vendor Advisory

Information

Published : 2018-08-06 20:29

Updated : 2024-11-21 04:11

NVD link : CVE-2018-7059

Mitre link : CVE-2018-7059

CVE.ORG link : CVE-2018-7059

JSON object : View

Products Affected

hp

aruba_clearpass_policy_manager

CWE

CWE-20

Improper Input Validation

{"id": "CVE-2018-7059", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N", "authentication": "SINGLE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}]}, "published": "2018-08-06T20:29:01.680", "references": [{"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-003.txt", "tags": ["Vendor Advisory"], "source": "security-alert@hpe.com"}, {"url": "https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2018-003.txt", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-20"}]}], "descriptions": [{"lang": "en", "value": "Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the \"mon\" permission could use this vulnerability to obtain cluster credentials which could allow privilege escalation. This vulnerability is only present when authenticated as a user with \"mon\" permission."}, {"lang": "es", "value": "Aruba ClearPass en versiones anteriores a la 6.6.9 tiene una vulnerabilidad en la API que ayuda a coordinar acciones del cl\u00faster. Un usuario autenticado con el permiso \"mon\" podr\u00eda emplear esta vulnerabilidad para obtener credenciales del cl\u00faster, lo que podr\u00eda permitir el escalado de privilegios. Esta vulnerabilidad solo est\u00e1 presente cuando se est\u00e1 autenticado como usuario con permisos \"mon\"."}], "lastModified": "2024-11-21T04:11:35.057", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:hp:aruba_clearpass_policy_manager:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AE946D7B-92CB-48B0-9760-08FD0C4EB889", "versionEndExcluding": "6.6.9"}], "operator": "OR"}]}], "sourceIdentifier": "security-alert@hpe.com"}