A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote threat actor to conduct a remote code execution attack. Successful exploitation could enable the attacker to run arbitrary commands on the underlying operating system.
2024-12-03T20:15:15.477
2025-04-07T15:02:08.187
Analyzed
CVSSv3.1: 7.2 (HIGH)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | arubanetworks | clearpass_policy_manager | < 6.11.10 | Yes |
Application | arubanetworks | clearpass_policy_manager | < 6.12.3 | Yes |