CVE-2017-5829

Description

References

• arubanetworks.com/assets/alert/HPESBHF03730.txt · Vendor Advisory
• securityfocus.com/bid/98722 · Third Party Advisory
• support.hpe.com/hpsc/doc/public/display · Vendor Advisory

More vulnerabilities in aruba clearpass policy manager

• CVE-2018-7059HIGH 8.8Aruba ClearPass prior to 6.6.9 has a vulnerability in the API that helps to coordinate cluster actions. An authenticated user with the "mon"…
• CVE-2018-7058CRITICAL 9.8Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this …
• CVE-2018-5390HIGH 7.5Linux kernel versions 4.9+ can be forced to make very expensive calls to tcp_collapse_ofo_queue() and tcp_prune_ofo_queue() for every incomi…
• CVE-2017-9002MEDIUM 6.1All versions of Aruba ClearPass prior to 6.6.8 contain reflected cross-site scripting vulnerabilities. By exploiting this vulnerability, an …
• CVE-2017-9001HIGH 8.1Aruba ClearPass 6.6.3 and later includes a feature called "SSH Lockout", which causes ClearPass to lock accounts with too many login failure…