7.8
High
CVE-2023-43506 A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate…
Description
A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Aruba ClearPass Policy Manager | Versions not published | |
| aruba_clear_pass_policy_manager 6.11 | 6.11x → 6.11.4 | No fix stated |
| aruba_clear_pass_policy_manager 6.10 | 6.10x → < 6.10.8 | 6.10.8 |
| aruba_clear_pass_policy_manager 6.9 | 6.9x → < 6.9.13 | 6.9.13 |
Other CVEs of Aruba ClearPass Policy Manager
The 33 CVEs of Aruba ClearPass Policy Manager →
CVE-2024-26302
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker…
4.8
Medium
CVE-2024-26301
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow a remote attacker…
6.5
Medium
CVE-2024-26300
A vulnerability in the guest interface of ClearPass Policy Manager could allow an authenticated remote attacker to…
6.6
Medium
CVE-2024-26299
A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote…
6.6
Medium