High severity7.2NVD Advisory· Published Jun 3, 2020· Updated Jun 17, 2026
CVE-2020-7116
CVE-2020-7116
Description
The ClearPass Policy Manager WebUI administrative interface has an authenticated command remote execution. When the attacker is already authenticated to the administrative interface, they could then exploit the system, leading to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.
Affected products
4cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*range: >=6.7.0,<=6.7.13
- (no CPE)range: before 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1
- ClearPass/ClearPass Policy Managerdescription
- Range: before 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1
Patches
Vulnerability mechanics
References
1- www.arubanetworks.com/assets/alert/ARUBA-PSA-2020-005.txtnvdVendor Advisory
News mentions
0No linked articles in our index yet.