CVE

Id
62216  
CVE No.
CVE-2013-2269  
Status
Candidate  
Description
The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in conjunction with information from a "default holding page" to discover the link that is used for sponsor approval of the guest request, then performing a direct request to that link.  
Phase
Assigned (20130225)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
622246 62216 CVE-2013-2269 CONFIRM:http://www.arubanetworks.com/support/alerts/aid-050813.asc  View
622247 62216 CVE-2013-2269 BID:59805  View
622248 62216 CVE-2013-2269 URL:http://www.securityfocus.com/bid/59805  View
622249 62216 CVE-2013-2269 SECUNIA:53358  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
20386 JVNDB-2013-001961 Puppet における任意のコードを実行される脆弱性 Puppet および Puppet Enterprise には、Puppet マスタ、または Puppet キックを有効にしたエージェントにおいて、任意のコードを実行される脆弱性が存在します。 CVE-2013-2274 62216 6.5 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001961.html  View