VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Aug 6, 2018· Updated Jun 17, 2026

CVE-2018-7058

CVE-2018-7058

Description

Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to gain administrator privileges on the system. The vulnerability is exposed only on ClearPass web interfaces, including administrative, guest captive portal, and API. Customers who do not expose ClearPass web interfaces to untrusted users are impacted to a lesser extent.

Affected products

2
  • Arubanetworks/Clearpassllm-create2 versions
    <6.6.9+ 1 more
    • (no CPE)range: <6.6.9
    • (no CPE)range: 6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.