CVE-2021-29145

Summary

A remote server side request forgery (SSRF) remote code execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s) prior to 6.9.5, 6.8.9, 6.7.14-HF1. Aruba has released patches for Aruba ClearPass Policy Manager that address this security vulnerability.

Affected Software

VendorProductVersion RangeStatus
n/aAruba ClearPass Policy ManagerPrior to 6.9.5, 6.8.9, 6.7.14-HF1affected

Weaknesses

  • remote server side request forgery (ssrf), remote code execution

ADP Enrichment

CVE Program Container

Additional References

References