WID-SEC-W-2024-3607

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Aruba ClearPass Policy Manager: Mehrere Schwachstellen

view advisory published 2024-12-03

Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Aruba ClearPass Policy Manager ausnutzen, um beliebigen Programmcode auszuführen oder einen Cross-Site-Scripting-Angriff durchzuführen.

01

describes (4)

Related CVEs.

IDseverity exploitable
CVE-2024-53672USmedium6.3—
A vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host. Successful exploi…
CVE-2024-51773USmedium5.4—
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote Attacker to conduct a stored cross-site scri…
CVE-2024-51772UShigh8.0—
An authenticated RCE vulnerability in the ClearPass Policy Manager web-based management interface allows remote authenticated users to run arbitrary commands on the underlying host…
CVE-2024-51771UShigh8.8—
A vulnerability in the HPE Aruba Networking ClearPass Policy Manager web-based management interface could allow an authenticated remote threat actor to conduct a remote code execut…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan