VYPR
← All advisories
High severity7.2NVD Advisory· Published Dec 7, 2018· Updated Jun 17, 2026

CVE-2018-7079

CVE-2018-7079

Description

Aruba ClearPass Policy Manager guest authorization failure. Certain administrative operations in ClearPass Guest do not properly enforce authorization rules, which allows any authenticated administrative user to execute those operations regardless of privilege level. This could allow low-privilege users to view, modify, or delete guest users. Resolution: Fixed in 6.7.6 and 6.6.10-hotfix.

Affected products

3
  • Arubanetworks/ClearPass Policy Manager3 versions
    cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*range: <6.6.10
    • (no CPE)range: before 6.7.6 and before 6.6.10-hotfix
    • (no CPE)range: ClearPass 6.7.x prior to 6.7.6, ClearPass 6.6.10 and earlier without hotfix applied

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.