Command injection

2021-10-1515:15:00

PRIOn knowledge base

www.prio-n.com

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

40.2%

JSON

A remote arbitrary command execution vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x prior to 6.10.2 - - ClearPass Policy Manager 6.9.x prior to 6.9.7-HF1 - - ClearPass Policy Manager 6.8.x prior to 6.8.9-HF1. Aruba has released patches for ClearPass Policy Manager that address this security vulnerability.

CPENameOperatorVersion
clearpass_policy_managerge6.8.0
clearpass_policy_managerlt6.8.9
clearpass_policy_managerge6.10.0
clearpass_policy_managerlt6.10.2
clearpass_policy_managerge6.9.0
clearpass_policy_managerlt6.9.7
clearpass_policy_managereq6.8.9
clearpass_policy_managereq6.9.7

Name	Operator	Version
clearpass_policy_manager	ge	6.8.0
clearpass_policy_manager	lt	6.8.9
clearpass_policy_manager	ge	6.10.0
clearpass_policy_manager	lt	6.10.2
clearpass_policy_manager	ge	6.9.0
clearpass_policy_manager	lt	6.9.7
clearpass_policy_manager	eq	6.8.9
clearpass_policy_manager	eq	6.9.7

References

www.arubanetworks.com/assets/alert/ARUBA-PSA-2021-018.txt