Cross-site request forgery (CSRF) vulnerability in the Insight module in Aruba Networks ClearPass before 6.3.6 and 6.4.x before 6.4.1 allows remote attackers to hijack the authentication of a logged in user via unspecified vectors.
https://euvd.enisa.europa.eu/vulnerability/EUVD-2014-6502
http://www.arubanetworks.com/support/alerts/aid-10282014.txt