by Kastro
Paper/Archive/CVE-2022-23657

CVE-2022-23657

hpe — A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and bel…

EPSS 3%CVSS 10.0
critical.is priorityof 100
48
CVSS 10.0 (NVD)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 88.4.884 × 2017.7No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.

Affected

ProductAffectedFixed inSource
Aruba ClearPass Policy Manager6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below–CNA

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refarubanetworks.com/assets/alert/ARUBA-PSA-2022-007.txt