Vulnerability in Arubanetworks Clearpass
CVE-2020-7113
A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP packets resulting in the compromise of some of ClearPass' service accounts. Resolution: Fixed in 6.7.10, 6.8.1, 6.9.0 and higher.
EPSS: 0.009 (54.5th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 4.9 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N.
Affected products
- Arubanetworks Clearpass
- N/a Clearpass Policy Manager — versions ClearPass 6.8.x prior to 6.8.5 ClearPass 6.7.x prior to 6.7.13
References
- security-alert@hpe.com (x_refsource_MISC, Vendor Advisory)
Frequently asked questions
- What is CVE-2020-7113?
- CVE-2020-7113 is a medium-severity vulnerability in Arubanetworks Clearpass. CVSS score: 4.9/10. Published 2020-04-16.
- How severe is CVE-2020-7113?
- Medium severity. CVSS v3 base score is 4.9 out of 10.