Aruba Networks ClearPass Policy Manager 操作系统命令注入漏洞

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. An operating system command injection vulnerability exists in Aruba Networks ClearPass Policy Manager. An attacker could use this vulnerability to run...

CVE-2022-43540

CVE-2022-43540 concerns the ClearPass OnGuard macOS agent. The vulnerability allows a local attacker with access to a macOS system to potentially retrieve sensitive information from Aruba ClearPass Policy Manager. Affected product versions include ClearPass Policy Manager 6.10.x up to 6.10.7 and ...

CVE-2022-43540

A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that is of a sensitive nature in Aruba ClearPass Policy Manage...

CVE-2022-43540

A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that is of a sensitive nature in Aruba ClearPass Policy Manage...

CVE-2022-43539

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

CVE-2022-43539

Summary: CVE-2022-43539 affects Aruba ClearPass Policy Manager, specifically the cluster communications channel. The vulnerability allows an attacker with a privileged network position to exfiltrate information that could enable unauthorized actions as a privileged user. Affected products/version...

CVE-2022-43539

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

CVE-2022-43538

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

CVE-2022-43538

Aruba ClearPass Policy Manager is affected: remote authenticated users can execute arbitrary commands on the host via the web-based management interface. Impact is root-level access and full system compromise for affected versions 6.10.x (6.10.7 and below) and 6.9.x (6.9.12 and below). No exploit...

CVE-2022-43538

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

CVE-2022-43537

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

CVE-2022-43537

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

CVE-2022-43537

Aruba ClearPass Policy Manager web-based management interface contains a vulnerability that allows remote authenticated users to execute arbitrary commands on the underlying OS with root privileges, potentially leading to full system compromise. Affected versions are ClearPass Policy Manager 6.10...

CVE-2022-43536

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

CVE-2022-43536

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

CVE-2022-43536

CVE-2022-43536 affects Aruba ClearPass Policy Manager, specifically its web-based management interface. The vulnerability allows remote authenticated users to run arbitrary commands on the underlying host, potentially executing as root and leading to full system compromise. Affected versions are ...

CVE-2022-43535

A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with NT AUTHORITY\SYSTEM level privileges on the Windows instance in Aruba ClearPass...

CVE-2022-43535

CVE-2022-43535 affects Aruba ClearPass Policy Manager on Windows via the ClearPass OnGuard agent. Connected sources confirm a local privilege elevation vulnerability that could allow a user to execute code with NT AUTHORITY\SYSTEM privileges on vulnerable installations. Affected versions are Arub...

CVE-2022-43534

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the Linux instance in Aruba ClearPass Policy Manager versions...

CVE-2022-43534

The CVE-2022-43534 entry describes a privilege elevation vulnerability in Aruba ClearPass Policy Manager via the ClearPass OnGuard Linux agent. Affected products are Aruba ClearPass Policy Manager 6.10.x (up to 6.10.7) and 6.9.x (up to 6.9.12). The root cause is an issue in the OnGuard Linux agen...