CVE-2020-7119 Privilege escalation in Aruba ALE ClearPass C1000 S-1200 R4 HW-Based Appliance
An authenticated admin can escalate privileges to modify files as a privileged OS user on Aruba ALE appliances.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2020-7119?
CVE-2020-7119 is a medium-severity vulnerability in Aruba ALE ClearPass C1000 S-1200 R4 HW-Based Appliance, published on 4 Sep 2020. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability exists in the Aruba Analytics and Location Engine (ALE) web management interface 2.1.0.2 and earlier firmware that allows an already authenticated administrative user to arbitrarily modify files as an underlying privileged operating system user.
Which versions are affected by CVE-2020-7119?
It affects 1 product.
Products include Arubanetworks Analytics and Location Engine.
How do I fix CVE-2020-7119?
No fix has been published for CVE-2020-7119 yet. Limit exposure of the affected software until one is available.
Is CVE-2020-7119 being exploited?
There is no known exploitation of CVE-2020-7119 in the wild and no public exploit code.
Other vulnerabilities in Aruba ALE ClearPass C1000 S-1200 R4 HW-Based Appliance
- CVE-2026-76708 Unauthenticated Remote Unauthorized Access Vulnerability in HPE Networking Analytics and Location Engine (ALE)
- CVE-2026-76709 Unauthenticated Remote Arbitrary File Write Vulnerability in HPE Networking Analytics and Location Engine (ALE)
- CVE-2026-76710 Information disclosure in ALE
- CVE-2026-76711 Unauthenticated Remote Data Injection Vulnerability in HPE Networking Analytics and Location Engine (ALE)
- CVE-2026-76712 Information disclosure in ALE
Sources
Also known as GHSA-2gvr-mfrj-8q6g.