CVE-2022-23673 - A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below

Back Back to CVE browser

HIGH

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below

Published May 17, 2022

7.2

HIGH

CVSS 3.1

EPSS 2.20%

Description

A authenticated remote command injection vulnerability was discovered in Aruba ClearPass Policy Manager version(s): 6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.

Affected products

Vendor n/a Product Aruba ClearPass Policy Manager Default
n/a
- Version
  6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Aruba ClearPass Policy Manager

n/a

Version	Status	Constraints
6.10.4 and below, 6.9.9 and below, 6.8.9-HF2 and below, 6.7.x and below	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-78

OS Command Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-28612
Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-007.txt
x_refsource_MISCMitigationVendor Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-28612		Advisory
https://www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-007.txt		x_refsource_MISCMitigationVendor Advisory