CVE-2021-40993

CVE-2021-40993 documents a remote SQL injection in Aruba ClearPass Policy Manager. Affected are ClearPass Policy Manager 6.10.x before 6.10.2, 6.9.x before 6.9.7-HF1, and 6.8.x before 6.8.9-HF1. The root cause is a SQL injection vulnerability in the product’s handling of database queries. Aruba h...