CVE-2021-26686
Published: Feb 23, 2021
Modified: Aug 3, 2024
Description
A remote authenticated SQL Injection vulnerabilitiy was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1. A vulnerability in the web-based management interface API of ClearPass could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass instance. An attacker could exploit this vulnerability to obtain and modify sensitive information in the underlying database.
| Vendor | Product | Versions |
|---|---|---|
n/a | Aruba ClearPass Policy Manager | affected Prior to 6.9.5, 6.8.8-HF1, 6.7.14-HF1 |
References
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now