VYPR
← All advisories
Critical severity9.8NVD Advisory· Published Oct 15, 2021· Updated Jun 17, 2026

CVE-2021-40997

CVE-2021-40997

Description

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability.

Affected products

5
  • Arubanetworks/ClearPass Policy Manager4 versions
    cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:arubanetworks:clearpass_policy_manager:*:*:*:*:*:*:*:*range: >=6.8.0,<6.8.9
    • cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.8.9:-:*:*:*:*:*:*
    • cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.9.7:-:*:*:*:*:*:*
    • (no CPE)range: <6.10.2, <6.9.7-HF1, <6.8.9-HF1
  • Aruba/ClearPass Policy Managerdescription

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.