cvedb.io
CVE-2015-3655
HIGH · CVSS 8.8
EPSS exploitation probability: 0%
Published 2017-08-29T15:29:00.267 · Last modified 2026-06-17T00:26:03.043

Summary

Cross-site request forgery (CSRF) vulnerability in Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote attackers to hijack the authentication of administrators by leveraging improper enforcement of the anti-CSRF token.

Affected products

arubanetworks — clearpass

Does this affect you?

Add your gear to cvedb and we'll alert you only when arubanetworks ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.