VYPR
← All advisories
Unrated severityNVD Advisory· Published Nov 19, 2014· Updated Jun 17, 2026

CVE-2014-6621

CVE-2014-6621

Description

Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 does not disable the troubleshooting and diagnostics page in production systems, which allows remote attackers to obtain version numbers, module configuration, and other sensitive information by reading the page.

Affected products

3
  • Arubanetworks/Clearpass3 versions
    cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*range: <=6.3.4
    • cpe:2.3:a:arubanetworks:clearpass:6.4.0:*:*:*:*:*:*:*
    • (no CPE)range: <6.3.6, <6.4.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.