Lucene search

[email protected]CVE-2022-37877

HistorySep 20, 2022 - 8:15 p.m.

CVE-2022-37877

2022-09-2020:15:10

[email protected]

web.nvd.nist.gov

cve-2022-37877

clearpass onguard

macos

user privileges

aruba clearpass policy manager

security vulnerability

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.5%

JSON

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address this security vulnerability.

Affected configurations

NVD

Node

arubanetworksclearpass_policy_managerRange6.9.0–6.9.12

arubanetworksclearpass_policy_managerRange6.10.0–6.10.7

AND

applemacosMatch-

CPENameOperatorVersion
arubanetworks:clearpass_policy_managerarubanetworks clearpass policy managerlt6.9.12
arubanetworks:clearpass_policy_managerarubanetworks clearpass policy managerlt6.10.7

CPE	Name	Operator	Version
arubanetworks:clearpass_policy_manager	arubanetworks clearpass policy manager	lt	6.9.12
arubanetworks:clearpass_policy_manager	arubanetworks clearpass policy manager	lt	6.10.7

CNA Affected

[
  {
    "product": "Aruba ClearPass Policy Manager",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.10.x: 6.10.6 and below"
      },
      {
        "status": "affected",
        "version": "6.9.x:  6.9.11 and below"
      }
    ]
  }
]

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-013.txt

Social References

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

12.5%

JSON

Related for CVE-2022-37877

prion1 cvelist1 nvd1