CVE-2015-3653: Arubanetworks Clearpass

High severity, CVSS 7.2. EPSS: 2.3% chance of exploitation in the next 30 days.

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to write to arbitrary files within the underlying operating system and consequently cause a denial of service or gain privileges by leveraging incorrect permission checking.

Affected products

• Arubanetworks Clearpass: up to and including 6.4.6; version 6.5 only; version 6.5.1 only

Published 2017-08-29. Last modified 2026-06-17.