Lucene search

CVE-2024-26297

🗓️ 27 Feb 2024 22:15:15Reported by hpeType

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2024-26297	27 Feb 202422:03	–	cvelist
Vulnrichment	CVE-2024-26297	27 Feb 202422:03	–	vulnrichment
NVD	CVE-2024-26297	27 Feb 202422:15	–	nvd
Prion	Design/Logic Flaw	27 Feb 202422:15	–	prion

Nvd

Node

arubanetworks clearpass_policy_managerRange6.9.0–6.9.13

arubanetworks clearpass_policy_managerRange6.10.0–6.10.8

arubanetworks clearpass_policy_managerRange6.11.0–6.11.6

arubanetworks clearpass_policy_managerMatch6.9.13-

arubanetworks clearpass_policy_managerMatch6.9.13cumulative_hotfix_patch_2

arubanetworks clearpass_policy_managerMatch6.9.13cumulative_hotfix_patch_3

arubanetworks clearpass_policy_managerMatch6.9.13cumulative_hotfix_patch_4

arubanetworks clearpass_policy_managerMatch6.10.8-

arubanetworks clearpass_policy_managerMatch6.10.8cumulative_hotfix_patch_2

arubanetworks clearpass_policy_managerMatch6.10.8cumulative_hotfix_patch_5

arubanetworks clearpass_policy_managerMatch6.10.8cumulative_hotfix_patch_6

arubanetworks clearpass_policy_managerMatch6.12.0

[
  {
    "defaultStatus": "affected",
    "product": "Aruba ClearPass Policy Manager",
    "vendor": "Hewlett Packard Enterprise (HPE)",
    "versions": [
      {
        "status": "affected",
        "version": "ClearPass Policy Manager 6.12.x: 6.12.0"
      },
      {
        "status": "affected",
        "version": "ClearPass Policy Manager 6.11.x: 6.11.6 and below"
      },
      {
        "status": "affected",
        "version": "ClearPass Policy Manager 6.10.x: ClearPass 6.10.8 Hotfix Q4 2023 for Security issues and below"
      },
      {
        "status": "affected",
        "version": "ClearPass Policy Manager 6.9.x: ClearPass 6.9.13 Hotfix Q4 2023 for Security issues and below"
      }
    ]
  }
]

Source	Link
arubanetworks	www.arubanetworks.com/assets/alert/ARUBA-PSA-2024-001.txt

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Feb 2024 22:15Current

7.2High risk

Vulners AI Score7.2

CVSS37.2 - 8.8

EPSS0.0057

SSVC

CWE-77