CVE-2015-3655 | BDVDB-2026-89674 Detail

Description#

Cross-site request forgery (CSRF) vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication of administrators by leveraging improper enforcement of the anti-CSRF token.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.arubanetworks.com/assets/alert/ARUBA-PSA-2015-009.txt
http://www.securityfocus.com/bid/100594

Exploit#

No public exploit known

History#

Version 12017-08-29Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.