« Back to list

CVE-2014-4031

Status: ModifiedMedium (4)—

The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to obtain database credentials via unspecified vectors.

CVSS

Exploitation probability (EPSS)

EPSS (Exploit Prediction Scoring System, FIRST) estimates how likely a vulnerability is to be exploited in the wild within 30 days. It complements CVSS (impact) and CISA KEV (confirmed exploitation).

Affected technologies (1)

Arubanetworks — Clearpass

CWEs

References

Raw JSON (NVD)

Show
{
  "id": "CVE-2014-4031",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 4,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:S/C:P/I:N/A:N",
          "authentication": "SINGLE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "NONE",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 2.9,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 8,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2014-07-15T14:55:10.670",
  "references": [
    {
      "url": "http://secunia.com/advisories/58936",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.arubanetworks.com/support/alerts/aid-07032014.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/58936",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.arubanetworks.com/support/alerts/aid-07032014.txt",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-200"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "The Policy Manager in Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x through 6.1.4.61696, 6.2.x through 6.2.6.62196, and 6.3.x before 6.3.4 allows remote authenticated users to obtain database credentials via unspecified vectors."
    },
    {
      "lang": "es",
      "value": "Policy Manager en Aruba Networks ClearPass 5.x, 6.0.x, 6.1.x hasta 6.1.4.61696, 6.2.x hasta 6.2.6.62196 y 6.3.x anterior a 6.3.4 permite a usuarios remotos autenticados obtener las credenciales de la base de datos a través de vectores no especificados."
    }
  ],
  "lastModified": "2026-06-17T00:09:19.187",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:arubanetworks:clearpass:5.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "EF7324FA-8041-4C79-B630-5912E0AC6880"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:clearpass:5.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "AD0B9F17-CC52-497E-B492-73DFBF6203C0"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:clearpass:5.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "584703D0-5E85-4BDA-A670-6BECF3A71BB7"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:clearpass:6.0.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6FFFA1B8-1B2B-4DE1-8469-FFEDC9ECF34C"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:clearpass:6.0.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "D10617AC-F939-4CA1-AD63-C192125F2EE5"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:clearpass:6.1:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "ADEE2E01-54D8-4C1B-914B-EA3B31F08871"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:clearpass:6.1.4.61696:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "A6D81C26-0DE2-4E8A-AE68-04C0D095B4D4"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:clearpass:6.2:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "6E9826DA-B101-4806-885E-39CEEE27EA36"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:clearpass:6.2.6.62196:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5F48D14-F418-45D3-8EC1-E2D90DE3F902"
            },
            {
              "criteria": "cpe:2.3:a:arubanetworks:clearpass:6.3:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "4F1EF5D3-9C7D-4B48-96F3-371AF198CBCB"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}