XSS in Arubanetworks Clearpass
CVE-2014-6623
Cross-site request forgery (CSRF) vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors.
Vulnerability class: XSS (Cross-Site Scripting)
EPSS: 0.010 (58.7th percentile) — read the EPSS interpretation.
Affected products
- Arubanetworks Clearpass — versions 6.4.0
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_CONFIRM, Vendor Advisory)