CVE-2020-7115

CRITICAL

Aruba ClearPass Policy Manager 6.7.0 - Unauthenticated Remote Command Execution

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2020-7115 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit and 1 repository PoC.

Description

The ClearPass Policy Manager web interface is affected by a vulnerability that leads to authentication bypass. Upon successful bypass an attacker could then execute an exploit that would allow to remote command execution in the underlying operating system. Resolution: Fixed in 6.7.13-HF, 6.8.5-HF, 6.8.6, 6.9.1 and higher.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1
Repository PoCs
1

Affected products and versions

1
ProductSourceVersion range

ClearPass Policy Manager

CVE ListClearPass 6.9.x prior to 6.9.1 ClearPass 6.8.x prior to 6.8.5-HF ClearPass 6.7.x prior to 6.7.13-HFaffected

Proofs of concept

2

Catalogued exploits

ExploitDBAruba ClearPass Policy Manager 6.7.0 - Unauthenticated Remote Command ExecutionExploitDB exploitby SpicyItalianNot analyzed1 file
ExploitDB
PoC details

Repository PoCs

GitHubRetr02332/CVE-2020-7115Repository PoCby Retr023321Not analyzed4 files

18.8 KiB

GitHub
PoC details

References

3