QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2022-37880

Back to search

CVE-2022-37880

Published: Sep 20, 2022

Modified: May 28, 2025

PUBLISHED

Description

Vulnerabilities in the ClearPass Policy Manager web-based management interface allow remote authenticated users to run arbitrary commands on the underlying host. A successful exploit could allow an attacker to execute arbitrary commands as root on the underlying operating system leading to complete system compromise in Aruba ClearPass Policy Manager version(s): 6.10.x: 6.10.6 and below; 6.9.x: 6.9.11 and below. Aruba has released upgrades for Aruba ClearPass Policy Manager that address these security vulnerabilities.

VendorProductVersions

n/a

Aruba ClearPass Policy Manager

affected
6.10.x: 6.10.6 and below
affected
6.9.x: 6.9.11 and below

References

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now