CVE-2022-43531

CVE-2022-43531 describes SQL injection vulnerabilities in the web-based management interface of Aruba ClearPass Policy Manager. The issue affects ClearPass Policy Manager 6.10.x (≤ 6.10.7) and 6.9.x (≤ 6.9.12), and is exploitable by an authenticated remote attacker, potentially allowing access to...

CVE-2022-43530

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-43530

CVE-2022-43530 concerns Aruba ClearPass Policy Manager, where vulnerabilities in the web-based management interface could allow an authenticated remote attacker to perform SQL injection against the underlying database. The impact described across sources is potential exposure and modification of ...

CVE-2022-43530

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

PT-2023-14244 · Aruba · Clearpass Onguard +1

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.12 and below Description: A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance...

CVE-2022-43534: Improper Privilege Management

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the Linux instance in Aruba ClearPass Policy Manager versions...

CVE-2022-43531: Improper Neutralization of Special Elements used in an SQL Command

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

PT-2023-14242 · Aruba · Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: ClearPass Policy Manager versions 6.9.12 and below ClearPass Policy Manager versions 6.10.7 and below Description: The issue concerns the web-based management interface of ClearPass Policy Manager, where an authenticated remote attacker could...

PT-2023-14246 · Aruba +1 · Clearpass Onguard Windows Agent +2

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.12 and below Description: A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows...

PT-2023-14245 · Aruba · Clearpass Onguard Linux Agent +1

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.12 and below Description: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance...

CVE-2022-43539: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability exists in the ClearPass Policy Manager cluster communications that allow for an attacker in a privileged network position to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that allows for unauthorized actions as a...

CVE-2022-43533: Improper Privilege Management

A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager versions...

CVE-2022-43530: Improper Neutralization of Special Elements used in an SQL Command

Vulnerabilities in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct SQL injection attacks against the ClearPass Policy Manager instance. An attacker could exploit these vulnerabilities to obtain and modify sensitive information...

CVE-2022-43535: Improper Privilege Management

A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with NT AUTHORITY\SYSTEM level privileges on the Windows instance in Aruba ClearPass...

PT-2023-14243 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.x: 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.x: 6.9.12 and below Description: A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an...

CVE-2022-43536: Improper Neutralization of Special Elements used in an OS Command

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...

PT-2023-14249 · Aruba · Aruba Clearpass Policy Manager

Name of the Vulnerable Software and Affected Versions: Aruba ClearPass Policy Manager versions 6.10.7 and below Aruba ClearPass Policy Manager versions 6.9.12 and below Description: The issue allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploitati...

CVE-2022-43540: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability exists in the ClearPass OnGuard macOS agent that allows for an attacker with local macOS instance access to potentially obtain sensitive information. A successful exploit could allow an attacker to retrieve information that is of a sensitive nature in Aruba ClearPass Policy Manage...

CVE-2022-43532: Improper Neutralization of Input During Web Page Generation

A vulnerability in the web-based management interface of ClearPass Policy Manager could allow an authenticated remote attacker to conduct a stored cross-site scripting XSS attack against an administrative user of the interface. A successful exploit allows an attacker to execute arbitrary script...

CVE-2022-43537: Improper Neutralization of Special Elements used in an OS Command

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. Successful exploits could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complet...