CVE-2022-37877

2022-09-2020:00:52

hpe

www.cve.org

clearpass onguard

macos

root privilege escalatio

cve-2022-37877

aruba clearpass policy manager

security vulnerability

0.0004 Low

EPSS

Percentile

12.8%

JSON

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address this security vulnerability.

CNA Affected

[
  {
    "product": "Aruba ClearPass Policy Manager",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "6.10.x: 6.10.6 and below"
      },
      {
        "status": "affected",
        "version": "6.9.x:  6.9.11 and below"
      }
    ]
  }
]

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2022-013.txt

0.0004 Low

EPSS

Percentile

12.8%

JSON

Related for CVELIST:CVE-2022-37877