7.2
High
CVE-2022-43538 Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run…
Description
Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aruba ClearPass Policy Manager | Versions not published |
Other CVEs of Aruba ClearPass Policy Manager
The 33 CVEs of Aruba ClearPass Policy Manager →
CVE-2024-26302
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker…
4.8
Medium
CVE-2024-26301
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker…
6.5
Medium
CVE-2024-26300
A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to…
6.6
Medium
CVE-2024-26299
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote…
6.6
Medium