by Kastro
Paper/Archive/CVE-2022-23660

CVE-2022-23660

hpe — A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and bel…

EPSS 3%CVSS 10.0
critical.is priorityof 100
47
CVSS 10.0 (NVD)10.0 / 10 × 3030.0Not in CISA KEV+300.0EPSS percentile 86.8.868 × 2017.4No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

A remote authentication bypass vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.

Affected

ProductAffectedFixed inSource
Aruba ClearPass Policy Manager6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below–CNA

Scores by source

NVD10.0CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

References

refarubanetworks.com/assets/alert/ARUBA-PSA-2022-007.txt