VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Apr 16, 2020· Updated Jun 17, 2026

CVE-2020-7114

CVE-2020-7114

Description

A vulnerability exists allowing attackers, when present in the same network segment as ClearPass' management interface, to make changes to certain databases in ClearPass by crafting HTTP packets. As a result of this attack, a possible complete cluster compromise might occur. Resolution: Fixed in 6.7.13, 6.8.4, 6.9.0 and higher.

Affected products

4
  • ClearPass/ClearPassdescription
  • Arubanetworks/Clearpass2 versions
    cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:arubanetworks:clearpass:*:*:*:*:*:*:*:*range: >=6.7.0,<6.7.13
    • (no CPE)range: before 6.7.13, 6.8.4, 6.9.0
  • ClearPass/ClearPassllm-create
    Range: before 6.7.13, 6.8.4, 6.9.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.