CVE-2014-2071

CVE-2014-2071 describes a privilege escalation vulnerability affecting Aruba Networks ClearPass Policy Manager versions 6.1.x, 6.2.x before 6.2.5.61640, and 6.3.x before 6.3.0.61712. When ClearPass is configured with both tunneled and non-tunneled EAP methods in a single policy, an authenticated attacker can gain elevated privileges by manipulating inner and outer identities within a tunneled EAP method. This vulnerability carries a CVSS score of 7.1 (HIGH), indicating a high potential for impact on confidentiality, integrity, and availability, with an adjacent network attack vector and high attack complexity. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.