Aruba ClearPass Policy Manager Command Injection Vulnerability (CNVD-2022-64231)

Aruba ClearPass Policy Manager is an application of the U.S. company Aruba to provide wireless network security access management system Aruba ClearPass Policy Manager has a command injection vulnerability, the vulnerability stems from the user input structure to execute the command process, the network system or product fails to properly filter the Special characters, commands, etc., after the authentication of remote attackers can use the vulnerability in the underlying host to run arbitrary commands.