Command injection

2021-07-0817:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.5%

JSON

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): Prior to 6.10.0, 6.9.6 and 6.8.9. Aruba has released updates to ClearPass Policy Manager that address this security vulnerability.

CPENameOperatorVersion
clearpass_policy_managerge6.9.0
clearpass_policy_managerlt6.9.6
clearpass_policy_managerge6.8.0
clearpass_policy_managerlt6.8.9
clearpass_policy_managerge6.7.0
clearpass_policy_managerle6.7.14
clearpass_policy_managerge6.6.0
clearpass_policy_managerle6.6.10

Name	Operator	Version
clearpass_policy_manager	ge	6.9.0
clearpass_policy_manager	lt	6.9.6
clearpass_policy_manager	ge	6.8.0
clearpass_policy_manager	lt	6.8.9
clearpass_policy_manager	ge	6.7.0
clearpass_policy_manager	le	6.7.14
clearpass_policy_manager	ge	6.6.0
clearpass_policy_manager	le	6.6.10

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-012.txt