CVE-2015-3656: Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated low...

Security readout for executives and security teams

This flaw let a lower-level authenticated administrator in Aruba ClearPass Policy Manager gain higher privileges because authorization checks were not properly enforced. The business concern is unauthorized administrative control over a network access management system, but the provided sources do not report active exploitation or a CVSS score. Exposure is likely limited to organizations running affected ClearPass versions with reachable administrative access for lower-level administrator accounts. Systems already upgraded to 6.4.7, 6.5.2, or later are not indicated as affected by the supplied description. Treat this as a targeted administrative-control risk for ClearPass environments, not a broad internet worm risk. Prioritize upgrades where ClearPass manages production network access or where multiple delegated administrators can reach the management interface. Mitigation focus: Upgrade ClearPass Policy Manager to 6.4.7, 6.5.2, or later per Aruba guidance.; Review Aruba PSA-2015-009 for branch-specific remediation guidance.; Restrict ClearPass administrative access to trusted management networks..

Prepared

Jun 12, 2026, 21:19 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.