Cross-site request forgery (CSRF) vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| arubanetworks / clearpass | - | 6.3.5.x |
| arubanetworks / clearpass | 6.4.0 | 6.4.0.x |