CVE-2018-7059

Name of the Vulnerable Software and Affected Versions Aruba ClearPass versions prior to 6.6.9

Description The issue affects the API that coordinates cluster actions, allowing an authenticated user with the mon permission to potentially obtain cluster credentials. This could lead to privilege escalation. The vulnerability is specific to users authenticated with the mon permission.

Recommendations For versions prior to 6.6.9, update to version 6.6.9 or later to resolve the issue. As a temporary workaround, consider restricting the mon permission to minimize the risk of exploitation.