CVE-2013-2269

Published: Oct 1, 2013Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/ClearPass Guest 3.0 through 3.9.7, allows remote attackers to bypass intended access restrictions and approve a request by sending a guest request, then using "parameter manipulation" in conjunction with information from a "default holding page" to discover the link that is used for sponsor approval of the guest request, then performing a direct request to that link.

Affected (12)

Products: Arubanetworks: Clearpass, Clearpass Guest

Arubanetworks

2 products

Clearpass

Clearpass Guest

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Arubanetworks Clearpass	Version 5.0.1
Arubanetworks Clearpass	Version 5.1
Arubanetworks Clearpass	Version 5.2
Arubanetworks Clearpass	Version 6.0.1
Arubanetworks Clearpass	Version 6.0.2

Configuration B

7 vulnerable

Vulnerable Software	Affected Versions
Arubanetworks Clearpass Guest	Version 3.0
Arubanetworks Clearpass Guest	Version 3.1
Arubanetworks Clearpass Guest	Version 3.2
Arubanetworks Clearpass Guest	Version 3.3
Arubanetworks Clearpass Guest	Version 3.5
Arubanetworks Clearpass Guest	Version 3.7
Arubanetworks Clearpass Guest	Version 3.9