CVE-2013-2269: The Sponsorship Confirmation functionality in Aruba Networks ClearPass 5.x, 6.0.1, and 6.0.2, and Amigopod/...

Security readout for executives and security teams

This flaw affects Aruba Networks guest access sponsorship workflows. A remote requester could manipulate request parameters and information shown on the default holding page to reach the sponsor approval link directly, approving their own guest access instead of waiting for a sponsor. Exposure is most likely where affected ClearPass or Amigopod/ClearPass Guest versions still operate guest registration with sponsorship confirmation, especially if the guest request flow is reachable by untrusted users. Treat this as a targeted access-control issue for legacy guest network infrastructure. It is not presented as actively exploited, but it can undermine sponsor approval controls and may create unauthorized network access if affected systems remain in use. Mitigation focus: Check Aruba advisory AID-050813 for supported fixes or configuration guidance.; Inventory ClearPass and Amigopod/ClearPass Guest versions in guest access environments.; Upgrade, retire, or otherwise remediate affected versions following vendor guidance..

Prepared

Jun 14, 2026, 15:32 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.