CVE-2020-7113: Arubanetworks Clearpass

Medium severity, CVSS 4.9. EPSS: 0.9% chance of exploitation in the next 30 days.

A vulnerability was found when an attacker, while communicating with the ClearPass management interface, is able to intercept and change parameters in the HTTP packets resulting in the compromise of some of ClearPass' service accounts. Resolution: Fixed in 6.7.10, 6.8.1, 6.9.0 and higher.

Affected products

• Arubanetworks Clearpass: from 6.7.0, before 6.7.13 (fixed in 6.7.13); from 6.8.0, before 6.8.4 (fixed in 6.8.4)

Published 2020-04-16. Last modified 2026-06-17.