CVE-2018-7058: hewlett packard enterprise aruba clearpass Improper Authentication
Vulnerability summary
CVE-2018-7058 is a high (CVSS 10.0) Improper Authentication vulnerability in hewlett packard enterprise aruba clearpass. EPSS estimates a 3.89% chance of exploitation in the next 30 days, higher than 90.1% of scored vulnerabilities.
Timeline
- 06-08-2018PublishedVulnerability first disclosed.
- 05-08-2024Last modifiedVulnerability information updated.
Description
Aruba ClearPass, all versions of 6.6.x prior to 6.6.9 are affected by an authentication bypass vulnerability, an attacker can leverage this vulnerability to gain administrator privileges on the system. The vulnerability is exposed only on ClearPass web interfaces, including administrative, guest captive portal, and API. Customers who do not expose ClearPass web interfaces to untrusted users are impacted to a lesser extent.
CVSS metrics
2 scores · 1 source · 2 versionsEPSS trend
Probability
3.89%
Chance of exploitation in the next 30 days
Percentile
90%
Versus all other CVEs
30-day change
0.00 pp
From 3.89% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Hewlett packard enterprise1 product
- aruba clearpass6.6.x prior to 6.6.9 and 6.7.x prior to 6.7.1
Hp1 product
- aruba_clearpass_policy_manager≥ 6.6.0, < 6.6.9
2 vendors · 2 products