CVE-2015-3655

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass Policy Manager versions prior to 6.4.7 Aruba Networks ClearPass Policy Manager versions 6.5.x prior to 6.5.2

Description A cross-site request forgery (CSRF) issue allows remote attackers to hijack the authentication of administrators. This is due to improper enforcement of the anti-CSRF token.

Recommendations For versions prior to 6.4.7, update to version 6.4.7 or later. For versions 6.5.x prior to 6.5.2, update to version 6.5.2 or later.