Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
VOLERION
Volerion Security Research

NOT DEFERRED DATABASE

VULNERABILITIES

CVE-2014-2593 Details

Description

The management console in Aruba Networks ClearPass Policy Manager 6.3.0.60730 allows local users to execute arbitrary commands via shell metacharacters in certain arguments of a valid command, as demonstrated by the (1) system status-rasession and (2) network ping commands.

Metrics

CVSS 3.x Severity and Vector Strings:

No CVSS 3.x data is available for this CVE.

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.

URLSource(s)Tag(s)
http://osvdb.org/show/osvdb/109662 CVE
https://exchange.xforce.ibmcloud.com/vulnerabilities/95491 CVE
https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-2593 CVE
http://www.arubanetworks.com/support/alerts/aid-050214.asc CVE
http://www.securityfocus.com/bid/69391 CVE

see all 10 references

Weakness Enumeration

CWE-IDCWE NameSource
CWE-264Permissions, Privileges, and Access Controls[email protected]

Affected Products

ProductVersions
arubanetworks clearpass policy manager
6.3.0.60730

CPE

  • cpe:2.3:a:arubanetworks:clearpass_policy_manager:6.3.0.60730:*:*:*:*:*:*:*

Remediation

  • No remediation found in references.

Change History

6 change records found show changes

QUICK INFO

CVE Dictionary Entry:
CVE-2014-2593
NVD Published Date:
Aug 29, 2014
NVD Last Modified:
Jun 17, 2026
Source:
[email protected]
CVE-2014-2593 Details - Not Deferred